Lucene search
+L

4445 matches found

Github Security Blog
Github Security Blog
•added 2026/04/17 6:31 p.m.•23 views

Bouncy Castle has an LDAP injection

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all prov modules. This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.84...

6.9CVSS6.4AI score0.00527EPSS
SaveExploits0References4Affected Software3
OSV
OSV
•added 2026/04/17 6:31 p.m.•24 views

GHSA-C3FC-8QFF-9HWX Bouncy Castle has an LDAP injection

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all prov modules. This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.84...

6.9CVSS6.4AI score0.00527EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/04/17 8:03 a.m.•14 views

Security update for polkit

This update for polkit fixes the following issue: CVE-2026-4897: Fixed possible OOM condition via specially crafted input to polkit-agent-helper-1 bsc1260859. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

6.8CVSS5.9AI score0.00151EPSS
SaveExploits0References4
OSV
OSV
•added 2026/04/17 8:03 a.m.•13 views

SUSE-SU-2026:1425-1 Security update for polkit

This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to polkit-agent-helper-1 bsc1260859...

5.5CVSS5.9AI score0.00151EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
•added 2026/04/17 8:03 a.m.•11 views

Security update for polkit

This update for polkit fixes the following issue: CVE-2026-4897: Fixed possible OOM condition via specially crafted input to polkit-agent-helper-1 bsc1260859. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

6.8CVSS5.9AI score0.00151EPSS
SaveExploits0References4
OSV
OSV
•added 2026/04/17 8:03 a.m.•8 views

SUSE-SU-2026:1424-1 Security update for polkit

This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to polkit-agent-helper-1 bsc1260859...

5.5CVSS5.9AI score0.00151EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/17 12:00 a.m.•27 views

PT-2026-37029

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.12 Description An improper authorization issue exists in helper-backed channels where empty resolved approver lists are interpreted as explicit approval authorization. This logic flaw allows attackers to resol...

6.5CVSS5.7AI score0.00436EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/04/17 12:00 a.m.•6 views

PT-2026-35625

Summary OpenClaw's outbound host-media attachment read helper could enable host-local file reads based on global or agent-level read access without also honoring sender and group-scoped tool policy. In channel deployments that used toolsBySender or group policy to deny read for less-trusted...

6CVSS5.7AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/04/17 12:00 a.m.•5 views

PT-2026-35612

Summary Sandbox noVNC helper route exposed interactive browser session credentials. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.2.21 = 2026.4.10 Impact The sandbox noVNC helper route could be reached without the intended bridge authentication,...

6.9CVSS5.8AI score
SaveExploits0References5
Fedora
Fedora
•added 2026/04/16 11:42 p.m.•20 views

[SECURITY] Fedora 44 Update: ksshaskpass-6.6.4-1.fc44

A ssh-add helper that uses kwallet and kpassworddialog...

5.8AI score
SaveExploits0
Fedora
Fedora
•added 2026/04/16 11:42 p.m.•17 views

[SECURITY] Fedora 44 Update: knighttime-6.6.4-1.fc44

Helpers for scheduling the dark-light cycle...

5.8AI score
SaveExploits0
NVD
NVD
•added 2026/04/15 10:16 a.m.•18 views

CVE-2026-0636

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all prov modules. This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.80.2, from...

6.9CVSS0.00527EPSS
SaveExploits0References30
Snyk
Snyk
•added 2026/04/15 10:16 a.m.•19 views

LDAP Injection

Overview org.bouncycastle:bcprov-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to LDAP Injection via the parseDN handling and the LDAP store helpers in X509LDAPCertStoreSpi and LDAPStoreHelper. An attacker can influence LDAP searc...

7.3CVSS6.3AI score0.00527EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/15 10:16 a.m.•20 views

LDAP Injection

Overview Affected versions of this package are vulnerable to LDAP Injection via the parseDN handling and the LDAP store helpers in X509LDAPCertStoreSpi and LDAPStoreHelper. An attacker can influence LDAP search filters by supplying a crafted X.500 subject or issuer string that is parsed into an...

7.3CVSS6.3AI score0.00527EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/15 8:59 a.m.•11 views

CVE-2026-0636 LDAP Injection Vulnerability in LDAPStoreHelper.java

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all prov modules. This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.80.2, from...

6.9CVSS6.4AI score0.00527EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/15 8:59 a.m.•250 views

CVE-2026-0636

CVE-2026-0636 affects BC-JAVA:bcprov libraries from Legion of the Bouncy Castle Inc. Affected versions are 1.49 up to but not including 1.84. The issue is an LDAP injection in LDAPStoreHelper.java caused by improper neutralization of special LDAP query elements. This results in a high-impact vuln...

6.9CVSS6.4AI score0.00527EPSS
SaveExploits0References30
Cvelist
Cvelist
•added 2026/04/15 8:59 a.m.•75 views

CVE-2026-0636 LDAP Injection Vulnerability in LDAPStoreHelper.java

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all prov modules. This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.80.2, from...

6.9CVSS0.00527EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/15 8:59 a.m.•11 views

CVE-2026-0636

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all prov modules. This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.80.2, from...

6.9CVSS6.4AI score0.00527EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2026/04/15 8:59 a.m.•12 views

CVE-2026-0636 LDAP Injection Vulnerability in LDAPStoreHelper.java

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all prov modules. This vulnerability is associated with program files LDAPStoreHelper. This issue affects BC-JAVA: from 1.74 before 1.80.2, from...

6.9CVSS5.9AI score
SaveExploits0References34
Zero Day Initiative
Zero Day Initiative
•added 2026/04/15 12:00 a.m.•25 views

(0Day) Docker Desktop credentialHelper Directory Traversal Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first obtain the ability to escape the container and execute high-privileged code within the Docker Hyper-V VM in order to exploit this vulnerability. The specific flaw...

7.5CVSS6.1AI score
SaveExploits0
Rows per page
Query Builder