PT-2024-27519 · Securenvoy · Securenvoy Mfa

Name of the Vulnerable Software and Affected Versions: SecurEnvoy MFA versions prior to 9.4.514 Description: Multiple LDAP injections vulnerabilities exist due to improper validation of user-supplied input. An unauthenticated remote attacker could exfiltrate data from Active Directory through bli...

CVE-2024-37393: Cleartext Transmission of Sensitive Information

Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514 due to improper validation of user-supplied input. An unauthenticated remote attacker could exfiltrate data from Active Directory through blind LDAP injection attacks against the DESKTOP service exposed on the...

CVE-2024-37393

SecurEnvoy MFA versions prior to 9.4.514 are vulnerable to multiple LDAP injection vulnerabilities caused by improper validation of user-supplied input. An unauthenticated remote attacker can perform blind LDAP injection attacks against the DESKTOP service via the /secserver HTTP endpoint. This f...

bouncycastle: potential blind LDAP injection attack using a self-signed certificate

A flaw was found in Bouncy Castle 1.73. This issue targets the fix of LDAP wild cards. Before the fix there was no validation for the X.500 name of any certificate, subject, or issuer, so the presence of a wild card may lead to information disclosure. This could allow a malicious user to obtain...

CVE-2024-33868

An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...

CVE-2024-33868

An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...

CVE-2024-33868

An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...

CVE-2024-33868

An LDAP injection vulnerability exists in the linqi process digitization program on Windows for versions prior to 1.4.0.1 . The flaw arises from the improper neutralization of special elements used in LDAP queries, which can lead to unauthorized data access or manipulation. To resolve this issue,...

CVE-2024-33868

An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...

CVE-2024-33868: Improper Neutralization of Special Elements used in an LDAP Query

An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...

PT-2024-25523 · Linqi · Linqi

Name of the Vulnerable Software and Affected Versions: linqi versions prior to 1.4.0.1 Description: An issue was discovered in the software, specifically an LDAP injection. Recommendations: For versions prior to 1.4.0.1, update to version 1.4.0.1 or later to resolve the issue...

FreeBSD : GLPI -- multiple vulnerabilities (faccf131-00d9-11ef-92b7-589cfc023192)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the faccf131-00d9-11ef-92b7-589cfc023192 advisory. - GLPI is a Free Asset and IT Management Software package. When authentication is made against...

CVE-2023-44038

In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via an LDAP injection attack...

CVE-2023-44038

VeridiumID versions prior to 3.5.0 are vulnerable to an LDAP injection attack on the identity provider page . This flaw allows an unauthenticated attacker to discover information about registered users. To resolve this issue, it is recommended to update to version 3.5.0 or later . Specific exploi...

CVE-2023-44038

In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via an LDAP injection attack...

CVE-2023-44038

In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via an LDAP injection attack...

CVE-2023-44038: Undefined Security Weakness

In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via an LDAP injection attack...

Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to remote attack due to Apache Derby (CVE-2022-46337)

Summary Apache Derby is shipped with IBM Tivoli Netcool Impact as part of its datastructure. Information about a security vulnerability affecting Apache Derby has been published in a security bulletin. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Bouncy Castle Crypto Package for Java

Summary Multiple vulnerabilities in Bouncy Castle Crypto Package for Java used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2023-33201 DESCRIPTION: The Bouncy Castle Crypto Package For Java bc-java could allow a remote attacker to obtain sensitive...

bouncycastle: potential blind LDAP injection attack using a self-signed certificate

A flaw was found in Bouncy Castle 1.73. This issue targets the fix of LDAP wild cards. Before the fix there was no validation for the X.500 name of any certificate, subject, or issuer, so the presence of a wild card may lead to information disclosure. This could allow a malicious user to obtain...