21510 matches found
CVE-2020-35518
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database...
Authentication flaw
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database...
CVE-2020-35518
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database...
CVE-2020-35518
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database...
CVE-2020-35518
CVE-2020-35518 affects 389-ds-base: information disclosure during DN binding that lets an unauthenticated attacker check whether an entry exists. Disclosures in MiracleLinux (AXSA:2021-1847/2281) show updates for 389-ds-base/1.3.10.2-12.el7 and 389-ds:1.4 modules are available; Ubuntu Red Hat and...
CVE-2020-35518
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database...
Azure File Sync Agent v12.0 Release – March 2021 (KB4568585)
Update for Azure File Sync agent version 12.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v12.0 Release – March 2021 (KB4568585)
Update for Azure File Sync agent version 12.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
TIBCO Security Advisory: March 23, 2021 - TIBCO eFTL -2021-28823
TIBCO eFTL Windows Platform Installation vulnerability Original release date: March23, 2021 Last revised: CVE-2021-28823 Source: TIBCO Software Inc. Products Affected TIBCO eFTL - Community Edition versions 6.5.0 and below TIBCO eFTL - Developer Edition versions 6.5.0 and below TIBCO eFTL -...
TIBCO Security Advisory: March 23, 2021 - TIBCO FTL -2021-28820
TIBCO FTL Windows Platform Artifact Search vulnerability Original release date:March 23, 2021 Last revised: CVE-2021-28820 Source: TIBCO Software Inc. Products Affected TIBCO FTL - Community Edition versions 6.5.0 and below TIBCO FTL - Developer Edition versions 6.5.0 and below TIBCO FTL -...
CentOS: Security Advisory for pki-base (CESA-2021:0851)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
dpdk: librte_vhost Integer overflow in vhost_user_set_log_base()
A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhostusersetlogbase could result in a smaller memory map than requested, possibly allowing memory corruption...
Release Information for Veeam Disaster Recovery Orchestrator v4
Veeam Disaster Recovery Orchestrator 4.0 is superseded by Veeam Disaster Recovery Orchestrator 5.0. Requirements Please confirm that you are running version 3.0 build 3.0.0.1770 or later prior to upgrading. You can check this in the VAO UI | Administration tab | About. After upgrading, your build...
CVE-2021-28660
rtwwxsetscan in drivers/staging/rtl8188eu/osdep/ioctllinux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the -ssid array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/ unfinished work; however, system integrators may...
Microsoft Windows Containers DP API Cryptography Flaw Vulnerability
PRODUCT : Windows Containers VENDOR : Microsoft SEVERITY : High AFFECTED VERSION : Windows 10, Windows Server IDENTIFIERS : CVE-2021-1645 PATCH VERSION : KB4598229, KB4598230, KB4598242, KB4598243 FOUND BY : Marc Nimmerrichter, Certitude Lab Introduction ------------ Windows containers is a featu...
Microsoft Windows Containers DP API Cryptography Flaw
Certitude Security Advisory - CSA-2021-002 PRODUCT : Windows Containers VENDOR : Microsoft SEVERITY : High AFFECTED VERSION : Windows 10, Windows Server IDENTIFIERS : CVE-2021-1645 PATCH VERSION : KB4598229, KB4598230, KB4598242, KB4598243 FOUND BY : Marc Nimmerrichter, Certitude Lab Introduction...
The vulnerability of the clidfs.c, libsmb_server.c, and smbXcli_base.c components of the Samba network communication software package lies in the lack of a mechanism to verify input data. This allows attackers to compromise the integrity of the data.
The vulnerability of the clidfs.c, libsmbserver.c, and smbXclibase.c components of the Samba network communication software package is related to a lack of mechanisms for checking input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...
Veeam Service Provider Console v5 Patch 2
This patch has been superseded by Veeam Service Provider Console v5 Patch 3. Requirements Please confirm you are running version5.0.0.6726 or later before installing Patch 2. You can check this by logging in to the backup portal and navigating to the Configuration Support Information tab. After...
Security Bulletin: IBM Watson OpenScale on Cloud Pak for Data is impacted by CVE-2020-25659
Summary IBM Watson OpenScale on Cloud Pak for Data has addressed CVE-2020-25659. Vulnerability Details CVEID: CVE-2020-25659 DESCRIPTION: python-cryptography could allow a remote attacker to obtain sensitive information, caused by a Bleichenbacher timing attack. By sending a specially-crafted...
