347 matches found
Microsoft Lightweight Directory Access Protocol 安全漏洞
Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. A security vulnerability exists in Microsoft Windows LDAP - Lightweight Directory Access Protocol. The following products and editions...
DEBIAN-CVE-2022-32746
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl...
Samba 安全漏洞
Samba is the standard Windows interoperability program suite for Linux and Unix. A security vulnerability exists in Samba versions prior to 4.16.4, 4.15.9, and 4.14.14, which stems from a Samba AD user who can cause the server to access uninitialized data via an LDAP add or modify request,...
PT-2022-4077 · Samba +10 · Samba +10
Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: The issue is related to a use-after-free problem in the Samba AD LDAP server, specifically in the AD DC database audit logging module. This module can access LDAP message values that have bee...
The vulnerability affects the implementation of the Lightweight Directory Access Protocol (LDAP) on Windows operating systems, allowing attackers to execute arbitrary code.
The vulnerability of the LDAP protocol implementation on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PT-2022-10021 · Smg · Smg
Name of the Vulnerable Software and Affected Versions: SMG affected versions not specified Description: A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access. Recommendations: At the...
The vulnerability in the implementation of the LDAP Lightweight Directory Access Protocol on the Windows operating system allows a perpetrator to execute arbitrary code.
The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
python-ldap 安全漏洞
python-ldap is the python-ldap open source LDAP client API for Python. A security vulnerability exists in python-ldap versions prior to 3.4.0 that stems from a Regular Expression Denial of Service ReDoS flaw in the LDAP schema parser. An attacker could use this vulnerability to cause a denial of...
CVE-2022-20798
A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance SMA, and Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass authentication and log in to the web...
CVE-2022-30161
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
CVE-2022-30141
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
CVE-2022-30139
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
CVE-2022-30139
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
CVE-2022-20798
A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance SMA, and Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass authentication and log in to the web...
Cisco多款产品 授权问题漏洞
Cisco Email Security Appliance ESA and Cisco Secure Email are both products of Cisco USA. cisco Email Security Appliance is an email security appliance. cisco Secure Email is a Cisco Secure Email formerly Email Security provides the best protection for your email from cyber threats.An authorizati...
Microsoft Lightweight Directory Access Protocol 安全漏洞
Microsoft Lightweight Directory Access Protocol LDAP is a directory service protocol from Microsoft that runs on a layer above the TCP/IP stack. A security vulnerability exists in the Microsoft Lightweight Directory Access Protocol, which affects the following products and versions: Windows 10...
Microsoft Lightweight Directory Access Protocol 安全漏洞
Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation that runs on a layer above the TCP/IP stack. A security vulnerability exists in Microsoft Lightweight Directory Access Protocol. The following products and editions are affected: Windo...
Apache Flume 安全漏洞
Apache Flume is a distributed, reliable and available service from the Apache Foundation. A remote code execution vulnerability exists in Apache Flume, which stems from the configuration of a JMS source with a JNDI LDAP data source URI, and could be exploited by an attacker to cause a remote code...
Mattermost Server allows System Admin to modify LDAP account names and email addresses
An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account...
Mattermost Server is vulnerable to Code Injection through its LDAP fields
An issue was discovered in Mattermost Server before 3.2.0. Attackers could read LDAP fields via injection...