Lucene search
+L

347 matches found

CNNVD
CNNVD
added 2022/09/13 12:0 a.m.11 views

Microsoft Lightweight Directory Access Protocol 安全漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. A security vulnerability exists in Microsoft Windows LDAP - Lightweight Directory Access Protocol. The following products and editions...

7.8CVSS7.6AI score0.0124EPSS
SaveExploits0References5
OSV
OSV
added 2022/08/25 6:15 p.m.3 views

DEBIAN-CVE-2022-32746

A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl...

5.4CVSS6.3AI score0.01085EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/07/27 12:0 a.m.4 views

Samba 安全漏洞

Samba is the standard Windows interoperability program suite for Linux and Unix. A security vulnerability exists in Samba versions prior to 4.16.4, 4.15.9, and 4.14.14, which stems from a Samba AD user who can cause the server to access uninitialized data via an LDAP add or modify request,...

8.1CVSS7.2AI score0.00909EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2022/07/18 12:0 a.m.8 views

PT-2022-4077 · Samba +10 · Samba +10

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: The issue is related to a use-after-free problem in the Samba AD LDAP server, specifically in the AD DC database audit logging module. This module can access LDAP message values that have bee...

9.8CVSS7AI score0.74265EPSS
SaveExploits15References235
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.11 views

The vulnerability affects the implementation of the Lightweight Directory Access Protocol (LDAP) on Windows operating systems, allowing attackers to execute arbitrary code.

The vulnerability of the LDAP protocol implementation on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.1AI score0.02333EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/06/24 12:0 a.m.12 views

PT-2022-10021 · Smg · Smg

Name of the Vulnerable Software and Affected Versions: SMG affected versions not specified Description: A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access. Recommendations: At the...

4.9CVSS4.8AI score0.00699EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.13 views

The vulnerability in the implementation of the LDAP Lightweight Directory Access Protocol on the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.5CVSS7.9AI score0.02116EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/06/18 12:0 a.m.6 views

python-ldap 安全漏洞

python-ldap is the python-ldap open source LDAP client API for Python. A security vulnerability exists in python-ldap versions prior to 3.4.0 that stems from a Regular Expression Denial of Service ReDoS flaw in the LDAP schema parser. An attacker could use this vulnerability to cause a denial of...

6.5CVSS6.4AI score0.01713EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2022/06/15 11:0 p.m.9 views

CVE-2022-20798

A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance SMA, and Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass authentication and log in to the web...

9.8CVSS7.5AI score0.01427EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/15 10:15 p.m.3 views

CVE-2022-30161

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.02333EPSS
SaveExploits0References3Affected Software25
OSV
OSV
added 2022/06/15 10:15 p.m.2 views

CVE-2022-30141

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

8.1CVSS7.4AI score0.02346EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/15 10:15 p.m.3 views

CVE-2022-30139

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

7.5CVSS7.2AI score0.02116EPSS
SaveExploits0References3Affected Software13
OSV
OSV
added 2022/06/15 10:15 p.m.2 views

CVE-2022-30139

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

7.5CVSS7.4AI score0.02116EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/15 6:15 p.m.9 views

CVE-2022-20798

A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance SMA, and Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass authentication and log in to the web...

9.8CVSS5.8AI score0.01427EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/06/15 12:0 a.m.10 views

Cisco多款产品 授权问题漏洞

Cisco Email Security Appliance ESA and Cisco Secure Email are both products of Cisco USA. cisco Email Security Appliance is an email security appliance. cisco Secure Email is a Cisco Secure Email formerly Email Security provides the best protection for your email from cyber threats.An authorizati...

9.8CVSS5.7AI score0.01427EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.7 views

Microsoft Lightweight Directory Access Protocol 安全漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory service protocol from Microsoft that runs on a layer above the TCP/IP stack. A security vulnerability exists in the Microsoft Lightweight Directory Access Protocol, which affects the following products and versions: Windows 10...

7.5CVSS8AI score0.01776EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.7 views

Microsoft Lightweight Directory Access Protocol 安全漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation that runs on a layer above the TCP/IP stack. A security vulnerability exists in Microsoft Lightweight Directory Access Protocol. The following products and editions are affected: Windo...

8.8CVSS8.2AI score0.02333EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.8 views

Apache Flume 安全漏洞

Apache Flume is a distributed, reliable and available service from the Apache Foundation. A remote code execution vulnerability exists in Apache Flume, which stems from the configuration of a JMS source with a JNDI LDAP data source URI, and could be exploited by an attacker to cause a remote code...

9.8CVSS6.6AI score0.04799EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/05/24 5:21 p.m.8 views

Mattermost Server allows System Admin to modify LDAP account names and email addresses

An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account...

4CVSS7AI score0.00624EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/24 5:21 p.m.8 views

Mattermost Server is vulnerable to Code Injection through its LDAP fields

An issue was discovered in Mattermost Server before 3.2.0. Attackers could read LDAP fields via injection...

5.3CVSS7AI score0.0092EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder