Lucene search
+L

32 matches found

Positive Technologies
Positive Technologies
•added 2020/11/02 12:00 a.m.•44 views

PT-2020-6661 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to the use of memory after it has been freed in the llcp sock bind function of the NFC protocol in the Linux kernel. This could allow a local attacker to access...

9.8CVSS6.6AI score0.92795EPSS
SaveExploits247References1384
Veracode
Veracode
•added 2017/10/04 9:26 a.m.•31 views

Login With Empty Credential

github.com/go-ldap/ldap allows the user to login with empty password or credentials. The vulnerability is only affects applications with the following conditions: - authorization of a user is performed by relying on the return error of the Bind function call i.e., a nil return is considered...

8.1CVSS8AI score0.01685EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2017/09/21 10:19 a.m.•35 views

CVE-2017-14623

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

8.1CVSS3.9AI score0.01685EPSS
SaveExploits0References1
NVD
NVD
•added 2017/09/20 11:29 p.m.•22 views

CVE-2017-14623

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

8.1CVSS8AI score0.01685EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/20 12:00 a.m.•5 views

CVE-2017-14623: Improper Authentication

In the ldap.v2 aka go-ldap package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: 1 it relies only on the return error of the Bind function call to determine whether a user is...

8.1CVSS6.7AI score0.01685EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2015/10/29 12:00 a.m.•15 views

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to circumvent JavaScript restrictions.

The vulnerability in the implementation of the bind function in PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control for certain functions...

9.3CVSS5.7AI score0.0643EPSS
SaveExploits0References3Affected Software2
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•52 views

SapporoWorks Black JumboDog 2.6.4/2.6.5 HTTP Proxy Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3858/info Black JumboDog 2.6.4 and 2.6.5 HTTP proxy is vulnerable to an exploitable buffer overflow. The buffer overflow can be exploited by sending excessively long expires, if-modified-since, and LastModified strings...

7.1AI score
SaveExploits0
CVE
CVE
•added 2007/10/18 10:00 a.m.•54 views

CVE-2002-2279

CVE-2002-2279 affects aldap 0.09, with a vulnerability in the bind function in config.inc. This flaw could allow remote attackers to authenticate with Manager permissions. The connected documents provide the affected component and impact but do not specify a fix/patch version or remediation steps...

10CVSS7AI score0.02064EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2007/10/18 10:00 a.m.•32 views

CVE-2002-2279

Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions...

6.6AI score0.02064EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/18 12:00 a.m.•4 views

CVE-2002-2279: Improper Authentication

Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions...

10CVSS6AI score0.02064EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 1999/09/29 4:00 a.m.•46 views

CVE-1999-0385

The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands...

7.3AI score0.1821EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 1999/09/29 12:00 a.m.•3 views

CVE-1999-0385: Buffer Copy without Checking Size of Input

The LDAP bind function in Exchange 5.5 has a buffer overflow that allows a remote attacker to conduct a denial of service or execute commands...

10CVSS6.2AI score0.1821EPSS
SaveExploits0References2
Rows per page
Query Builder