Skip to content
OpenAdvisories

Archive

16 May 2020

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.8

    DLL Injection in kerberos

    The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos_sspi LoadLibrary() method, because of a DLL path search.