Known Vulnerabilities for products from MIT
Listed below are 20 of the newest known vulnerabilities associated with the vendor "MIT".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-85456 json | MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing att... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-85449 json | MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODE_REPORT messages, allowin... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-85448 json | MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within Sh... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-85447 json | MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without validating duration or variable ... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-85446 json | MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity c... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-85445 json | MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that trusts the pa... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-85444 json | MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() functions that... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-85439 json | MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir() ... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-85438 json | MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in StringToIvPFunction() where dimension, piece, and degree ... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-85437 json | MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-85435 json | MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE_HOST messages on the vehicle bus, allowing a... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-85434 json | MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes. Attack... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-85429 json | MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from th... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-85425 json | MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handler that passes unsa... | Not Provided | 2026-09-03 | 2026-10-14 |
| CVE-2026-40356 json | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application ... | Not Provided | 2026-04-28 | 2026-07-08 |
| CVE-2026-40355 json | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_contex... | Not Provided | 2026-04-28 | 2026-10-15 |
| CVE-2024-37371 json | In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by s... | Not Provided | 2024-06-28 | 2026-05-12 |
| CVE-2024-37370 json | In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5... | Not Provided | 2024-06-28 | 2026-05-12 |
| CVE-2023-39975 json | kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated user... | 8.8 - HIGH | 2023-08-16 | 2024-02-01 |
| CVE-2023-36054 json | lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. ... | 6.5 - MEDIUM | 2023-08-07 | 2023-11-15 |
Known software with vulnerabilities from MIT
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Mit | Cgiemail | - |
| Application | Mit | Kerberos | - |
| Application | Mit | Kerberos 5 | - |
| Application | Mit | Kerberos Ftp Client | - |
| Application | Mit | Pgp Public Key Server | - |
| Application | Mit | Scratch-svg-renderer | 0.1.0 |
| Application | Mit | Scratch-vm | - |