Lucene search
+L

39 matches found

Positive Technologies
Positive Technologies
•added 2021/06/30 12:00 a.m.•4 views

PT-2021-29387

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.124 through 5.4.127 Description The issue is related to a possible use-after-free in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/30 12:00 a.m.•3 views

PT-2021-29452

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10.42 through v5.10.45 Description The issue concerns a possible use-after-free in the smsc75xx bind function. This problem was introduced in version v5.10.42 and is fixed in version v5.10.46. The actual impact and...

6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/04 12:00 a.m.•1 views

PT-2021-29160

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.34 through 4.9.270 Description A memory leak issue was discovered in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.34...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/04 12:00 a.m.•3 views

PT-2021-29145

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.235 Description A memory leak issue was discovered in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/04 12:00 a.m.•3 views

PT-2021-29128

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.193 Description A memory leak issue exists in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v4.19.193,...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/04 12:00 a.m.•3 views

PT-2021-29104

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.34 through 5.4.123 Description A memory leak issue exists in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.34 through...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/04 12:00 a.m.•3 views

PT-2021-29028

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.34 through 5.12.8 Description A memory leak issue exists in the smsc75xx bind function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 2.6.34 through...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/11/02 12:00 a.m.•46 views

PT-2020-6661 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to the use of memory after it has been freed in the llcp sock bind function of the NFC protocol in the Linux kernel. This could allow a local attacker to access...

9.8CVSS6.6AI score0.92795EPSS
SaveExploits249References1384
Veracode
Veracode
•added 2017/10/04 9:26 a.m.•32 views

Login With Empty Credential

github.com/go-ldap/ldap allows the user to login with empty password or credentials. The vulnerability is only affects applications with the following conditions: - authorization of a user is performed by relying on the return error of the Bind function call i.e., a nil return is considered...

8.1CVSS8AI score0.01685EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2017/09/21 10:19 a.m.•37 views

CVE-2017-14623

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

8.1CVSS3.9AI score0.01685EPSS
SaveExploits0References1
NVD
NVD
•added 2017/09/20 11:29 p.m.•23 views

CVE-2017-14623

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

8.1CVSS8AI score0.01685EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/20 12:00 a.m.•6 views

CVE-2017-14623: Improper Authentication

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

8.1CVSS6.7AI score0.01685EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2015/10/29 12:00 a.m.•19 views

PDF Editing JavaScript Bypass

The vulnerability in the implementation of the bind function in PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control for certain functions...

9.3CVSS5.7AI score0.0643EPSS
SaveExploits0References3Affected Software2
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•54 views

SapporoWorks Black JumboDog 2.6.4/2.6.5 HTTP Proxy Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3858/info Black JumboDog 2.6.4 and 2.6.5 HTTP proxy is vulnerable to an exploitable buffer overflow. The buffer overflow can be exploited by sending excessively long expires, if-modified-since, and LastModified strings...

7.1AI score
SaveExploits0
CVE
CVE
•added 2007/10/18 10:00 a.m.•64 views

CVE-2002-2279

CVE-2002-2279 affects aldap 0.09, with a vulnerability in the bind function in config.inc. This flaw could allow remote attackers to authenticate with Manager permissions. The connected documents provide the affected component and impact but do not specify a fix/patch version or remediation steps...

10CVSS7AI score0.02064EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2007/10/18 10:00 a.m.•40 views

CVE-2002-2279

Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions...

6.6AI score0.02064EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/18 12:00 a.m.•12 views

CVE-2002-2279: Improper Authentication

Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions...

10CVSS6AI score0.02064EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 1999/09/29 4:00 a.m.•49 views

CVE-1999-0385

The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands...

7.3AI score0.1821EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 1999/09/29 12:00 a.m.•8 views

CVE-1999-0385: Buffer Copy without Checking Size of Input

The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands...

10CVSS6.2AI score0.1821EPSS
SaveExploits0References2
Rows per page
Query Builder