Vulnerabilities > Kerberos Project

DATE	CVE	VULNERABILITY TITLE	RISK
2020-05-16	CVE-2020-13110	Uncontrolled Search Path Element vulnerability in Kerberos Project Kerberos The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos_sspi LoadLibrary() method, because of a DLL path search. local low complexity kerberos-project CWE-427	7.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.

Vulnerabilities > Kerberos Project {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Kerberos Project"}]}

Vulnerabilities > Kerberos Project