110450 matches found
PT-2026-87733
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
CVE-2026-69359: Heap-based Buffer Overflow
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...
RHEL 8 : python3 (RHSA-2026:64806)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64806 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...
Critical: 389-ds:1.4 security, bug fix, and enhancement update
389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length...
PT-2026-87539
Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free issue in Active Directory Domain Services allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...
CVE-2026-62762: NULL Pointer Dereference
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...
Critical: 389-ds-base
Issue Overview: A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed bind attempt can be installed on a connection following a subsequent, unrelated successful bind, regardless of which SASL...
389-ds-base security, bug fix, and enhancement update
3.2.0-10 - Bump version to 3.2.0-10 - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-10.2.z - Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference vi...
CVE-2026-62813: Use After Free
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...
CVE-2026-69395: Use of Externally-Controlled Format String
Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...
CVE-2026-69624: Incomplete List of Disallowed Inputs
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
ROS-20260908-73-0021
The vulnerability in python-pip is related to an incorrect restriction on the path name of the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
PT-2026-88455
The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting XSS issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes, or a low-privileged local user on...
RHEL 8 : 389-ds:1.4 (RHSA-2026:64789)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64789 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...
CVE-2026-69809: Missing Release of Memory after Effective Lifetime
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...
CVE-2026-72978: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
PT-2026-87735
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...
PT-2026-87432
Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...
PT-2026-87013
Name of the Vulnerable Software and Affected Versions SIMOVE Fleetmanager versions prior to 3.1.13 SIMOVE Fleetmanager versions prior to 3.2.4 SIMOVE Fleetmanager versions prior to 3.3.2 SIMOVE Fleetmanager versions prior to 4.0.1 SIPLANT version 1.7 SIPLANT version 2.2 SIPLANT version 3.0 SIPLAN...