347 matches found
Microsoft Lightweight Directory Access Protocol 安全漏洞
Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. A security vulnerability exists in Microsoft Lightweight Directory Access Protocol LDAP. An attacker exploiting this vulnerability coul...
The vulnerability of the 389 Directory Server service, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of the 389 Directory Server catalog service server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures by using a specially crafted LDAP request...
The vulnerability of the String.toLowerCase() and String.toUpperCase() methods in the Spring LDAP project, which simplifies work with LDAP (Lightweight Directory Access Protocol), allows an intruder to gain unauthorized access to protected information.
The vulnerability of the String.toLowerCase and String.toUpperCase methods in the Spring LDAP project, which simplifies the handling of LDAP Lightweight Directory Access Protocol, is related to insufficient registration checks. Exploiting this vulnerability can allow an attacker operating remotel...
CVE-2024-49124
Lightweight Directory Access Protocol LDAP Client Remote Code Execution Vulnerability...
CVE-2024-49121
Windows Lightweight Directory Access Protocol LDAP Denial of Service Vulnerability...
CVE-2024-49112
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Lightweight Directory Access Protocol 竞争条件问题漏洞
Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. A contention condition issue vulnerability exists in Microsoft Lightweight Directory Access Protocol. An attacker exploiting this...
PT-2024-9423 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a Lightweight Directory Access Protocol LDAP client remote code execution. It is caused by synchronization errors when using a shared resource. This allows a remote...
Microsoft Lightweight Directory Access Protocol 代码问题漏洞
Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. A code issue vulnerability exists in Microsoft Lightweight Directory Access Protocol. An attacker could exploit this vulnerability to...
Microsoft Lightweight Directory Access Protocol 缓冲区错误漏洞
Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. A buffer error vulnerability exists in Microsoft Lightweight Directory Access Protocol. An attacker could exploit this vulnerability to...
PT-2024-9421 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows Lightweight Directory Access Protocol LDAP affected versions not specified Description: The issue is related to a memory use after free vulnerability in the implementation of the Lightweight Directory Access Protocol LDAP in Microsoft...
Astra Linux – Vulnerability in the 389-DS-base
A flaw was discovered in 389-ds-base. A specially crafted LDAP query may potentially cause a failure on the directory server, resulting in a denial of service...
M-Files Server 安全漏洞
M-Files Server is a server for the M-Files system from M-Files, Inc. A security vulnerability exists in M-Files Server versions prior to 24.11 that stems from an authentication bypass condition in LDAP authentication, which allows users to authenticate without a password if the LDAP server itself...
Red Hat Keycloak 输入验证错误漏洞
Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. An input validation error vulnerability exists in Red Hat Keycloak that originates from a vulnerability that allows an attacker to perform othe...
YugabyteDB 日志信息泄露漏洞
YugabyteDB is a high-performance transactional distributed SQL database for cloud-native applications from Yugabyte USA. A security vulnerability exists in YugabyteDB that stems from LDAP binding passwords being recorded in plain text in application logs. This leads to an information disclosure...
PT-2025-11653
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager DSM versions prior to 7.1.1-42962-8 Synology DiskStation Manager DSM versions prior to 7.2.1-69057-7 Synology DiskStation Manager DSM versions prior to 7.2.2-72806-3 Description The issue is related to improper...
ca: token authentication bypass vulnerability
A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege...
