Lucene search
+L

24787 matches found

Cvelist
Cvelist
•added 2024/05/28 12:04 p.m.•48 views

CVE-2024-2199 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying userPassword using malformed input...

5.7CVSS5.7AI score0.00565EPSS
SaveExploits0References12
osv_cve
osv_cve
•added 2024/05/28 12:04 p.m.•21 views

CVE-2024-2199 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying userPassword using malformed input...

5.7CVSS6.6AI score
SaveExploits0References17
Vulnrichment
Vulnrichment
•added 2024/05/28 12:04 p.m.•29 views

CVE-2024-2199 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying userPassword using malformed input...

5.7CVSS6.5AI score0.00565EPSS
SaveExploits0References12
Mend
Mend
•added 2024/05/28 12:04 p.m.•6 views

CVE-2024-2199

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying "userPassword" using malformed input...

6.9CVSS0.00565EPSS
SaveExploits0References17
Debian CVE
Debian CVE
•added 2024/05/28 12:04 p.m.•33 views

CVE-2024-2199

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying userPassword using malformed input...

5.7CVSS6.3AI score0.00565EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2024/05/28 12:03 p.m.•41 views

CVE-2024-2199

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying userPassword using malformed input. Mitigation Mitigation for this issue is either not available or the currently available options don't meet...

5.7CVSS6.1AI score0.00565EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/28 12:00 a.m.•3 views

CVE-2024-3657: Improper Input Validation

A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service...

7.5CVSS6.7AI score0.01256EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/28 12:00 a.m.•3 views

CVE-2024-2199: Improper Input Validation

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying userPassword using malformed input...

5.7CVSS6.5AI score0.00565EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/28 12:00 a.m.•12 views

389-ds-base security vulnerabilities

389-ds-base is a highly available, fully featured, reliable and secure LDAP server implementation. It handles many of the largest LDAP deployments in the world. A security vulnerability exists in the 389-ds-base ldap server that stems from a specially crafted LDAP query that could cause the...

7.5CVSS6.7AI score0.01256EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/05/28 12:00 a.m.•42 views

Oracle Linux 8 : gstreamer1-plugins-base (ELSA-2024-3088)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3088 advisory. - CVE-2023-37328 gstreamer1-plugins-base: heap overwrite in subtitle parsing Tenable has extracted the preceding description block directly from the Oracle Linu...

8.8CVSS6.8AI score0.02052EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/05/27 12:00 a.m.•17 views

Fedora: Security Advisory for rust-leb128 (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2024/05/26 1:29 a.m.•19 views

[SECURITY] Fedora 40 Update: rust-leb128-0.2.5-9.fc40

Read and write DWARF's "Little Endian Base 128" LEB128 variable length integer encoding...

7.4AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/05/25 3:34 a.m.•15 views

SUSE CVE-2021-47452

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip netdev events generated on netns removal syzbot reported following harmless WARN: WARNING: CPU: 1 PID: 2648 at net/netfilter/core.c:468 nftnetdevunregisterhooks net/netfilter/nftablesapi.c:230 inline...

5.5CVSS6.3AI score0.00196EPSS
SaveExploits0References8
Microsoft Security Update
Microsoft Security Update
•added 2024/05/23 11:00 p.m.•22 views

2024-05 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5039705)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/05/23 12:00 a.m.•29 views

RHEL 8 : gstreamer1-plugins-base (RHSA-2024:3088)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3088 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...

8.8CVSS6.9AI score0.02052EPSS
SaveExploits0References6
Oracle linux
Oracle linux
•added 2024/05/23 12:00 a.m.•40 views

gstreamer1-plugins-base security update

1.16.1-3.0.1 - Update origin URL Orabug: 36209826 1.16.1-3 - CVE-2023-37328 gstreamer1-plugins-base: heap overwrite in subtitle parsing - Resolves: RHEL-19472...

8.8CVSS6.9AI score0.02052EPSS
SaveExploits0
osv_azl
osv_azl
•added 2024/05/22 8:15 p.m.•16 views

AZL-45048 CVE-2024-4453 affecting package gstreamer1-plugins-base 1.20.0-3

GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS8AI score0.01578EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2024/05/22 10:25 a.m.•12 views

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in logentryattr...

5.5CVSS5.7AI score0.00307EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/05/22 9:56 a.m.•22 views

harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks

A vulnerability was found HarfBuzz. This flaw allows attackers to trigger On^2 growth via consecutive marks during the process of looking back for base glyphs when attaching marks...

7.5CVSS7.2AI score0.01812EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2024/05/22 9:30 a.m.•26 views

qtbase: potential buffer overflow when reading KTX images

A vulnerability has been discovered in Qt Base, wherein an attacker can exploit a specially crafted KTX image file to induce a buffer overflow within the application parsing it. This overflow can subsequently result in a denial-of-service condition, rendering the affected application inaccessible...

6.2CVSS6AI score0.00321EPSS
SaveExploits0References4
Rows per page
Query Builder