Lucene search
+L

11522 matches found

Cvelist
Cvelist
added 2021/04/06 5:02 a.m.29 views

CVE-2021-28177 ASUS BMC's firmware: buffer overflow - LDAP configuration function

The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

4.9CVSS5.6AI score0.0181EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/04/06 12:00 a.m.46 views

RHEL 7 : libldb (RHSA-2021:1072)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1072 advisory. The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases. Securit...

7.5CVSS7.1AI score0.04328EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/04/06 12:00 a.m.10 views

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from the LDAP configuration function not validating the length of a string entered by the user, and can be exploited by a remote attacker to...

4.9CVSS6AI score0.0181EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/04/05 12:00 a.m.65 views

Debian DSA-4884-1 : ldb - security update

Multiple vulnerabilities have been discovered in ldb, a LDAP-like embedded database built on top of TDB. - CVE-2020-10730 Andrew Bartlett discovered a NULL pointer dereference and use-after-free flaw when handling 'ASQ' and 'VLV' LDAP controls and combinations with the LDAP pagedresults feature. ...

7.5CVSS7AI score0.04328EPSS
SaveExploits0References11
Fedora
Fedora
added 2021/04/04 1:09 a.m.98 views

[SECURITY] Fedora 33 Update: curl-7.71.1-9.fc33

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

5.3CVSS6.4AI score0.05301EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2021/04/03 12:00 a.m.30 views

Debian: Security Advisory (DSA-4884-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.04328EPSS
SaveExploits0References4
Debian
Debian
added 2021/04/02 7:54 a.m.51 views

[SECURITY] [DSA 4884-1] ldb security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4884-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 02, 2021 https://www.debian.org/security/faq -...

5CVSS0.1AI score0.04328EPSS
SaveExploits0
Debian
Debian
added 2021/04/02 7:54 a.m.123 views

[SECURITY] [DSA 4884-1] ldb security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4884-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 02, 2021 https://www.debian.org/security/faq -...

7.5CVSS8.5AI score0.04328EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2021/04/01 12:00 a.m.18 views

Debian: Security Advisory (DLA-2611-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.04328EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2021/03/31 9:56 p.m.22 views

Security Bulletin: Vulnerability in the Fabric OS used by IBM b-type SAN directors and switches.

Summary Brocade Fabric OS versions before v9.0.0 and after version v8.1.0, configured in Virtual Fabric mode contain a weakness in the ldap implementation . Vulnerability Details CVEID: CVE-2020-15376 DESCRIPTION: Broadcom Brocade Fabric OS could allow a remote attacker to bypass security...

4.3CVSS0.2AI score0.00869EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2021/03/30 9:49 a.m.51 views

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

9.8CVSS6.7AI score0.17939EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.8 views

The vulnerability of the LDAP server of the Samba networking software package, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of the Samba networking software’s LDAP server is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.5CVSS6.9AI score0.0244EPSS
SaveExploits0References5Affected Software5
Veracode
Veracode
added 2021/03/29 5:30 p.m.28 views

Denial Of Service (DoS)

samba is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds memory write in an LDAP attribute...

7.5CVSS3.2AI score0.04328EPSS
SaveExploits0References14Affected Software2
Fedora
Fedora
added 2021/03/27 12:19 a.m.59 views

[SECURITY] Fedora 34 Update: libldb-2.3.0-1.fc34

An extensible library that implements an LDAP like API to access remote LDAP servers, or use local tdb databases...

7.5CVSS3.8AI score0.04328EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2021/03/27 12:00 a.m.13 views

Fedora: Security Advisory for libldb (FEDORA-2021-c2d8628d33)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.9AI score
SaveExploits0References2
OSV
OSV
added 2021/03/26 5:15 p.m.30 views

CVE-2020-35518

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database...

5.3CVSS6.5AI score
SaveExploits0References4
NVD
NVD
added 2021/03/26 5:15 p.m.15 views

CVE-2020-35518

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database...

5.3CVSS0.01538EPSS
SaveExploits0References4
OSV
OSV
added 2021/03/26 5:15 p.m.5 views

DEBIAN-CVE-2020-35518

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database...

5.3CVSS5.6AI score0.01538EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/26 5:15 p.m.29 views

Authentication flaw

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database...

5CVSS5.1AI score0.01538EPSS
SaveExploits0References4Affected Software3
UbuntuCve
UbuntuCve
added 2021/03/26 5:15 p.m.37 views

CVE-2020-35518

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database...

5.3CVSS6.3AI score0.01538EPSS
SaveExploits0References4
Rows per page
Query Builder