187 matches found
DEBIAN-CVE-2017-9287
servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0...
CVE-2017-9287
CVE-2017-9287 affects OpenLDAP slapd back-mdb/search.c and allows a remote crash via a search using Paged Results with page size 0. Public sources in connected docs confirm OpenLDAP versions up to 2.4.44 are affected, with multiple advisories noting a double-free denial-of-service in OpenLDAP and...
CVE-2014-9287
This CVE entry is rejected/not used as stated in the Initial Description.
CVE-2016-9287
In /framework/modules/notfound/controllers/notfoundController.php of Exponent CMS 2.4.0 patch1, untrusted input is passed into getSearchResults. The method getSearchResults is defined in the search model with the parameter '$term' used directly in SQL. Impact is a SQL injection...
CVE-2016-9287
The CVE-2016-9287 issue affects Exponent CMS 2.4.0 patch1, where untrusted input is passed from /framework/modules/notfound/controllers/notfoundController.php into getSearchResults and used directly in SQL in the search model. This unfiltered "$term" leads to a SQL injection vulnerability and pot...
