11528 matches found
Fedora: Security Advisory for curl (FEDORA-2020-6af1dd2936)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Node.js third-party modules: [meemo-app] Denial of Service via LDAP Injection
I would like to report Denial of service via LDAP Injection vulnerability in meemo-app module. It allows a malicious attacker to send a crafted input that is interpreted as an LDAP filter, leading to Denial of Service. Module module name: meemo-app version: 1.9.2 npm page:...
Node.js third-party modules: [cloudron-surfer] Denial of Service via LDAP Injection
I would like to report Denial of service via LDAP Injection vulnerability in cloudron-surfer module. It allows a malicious attacker to send a malformed input that is interpreted as an LDAP filter, leading to Denial of Service. Module module name: cloudron-surfer version: 5.9.0 npm page:...
Apache Archiva < 2.2.5 LDAP Injection Vulnerability
Apache Archiva is prone to an LDAP injection vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:archiva"; if...
LDAP Injection
archiva-redback-core is vulnerable to LDAP injection. The vulnerability exists due to the lack of sanitization of source.getUsername in LdapBindAuthenticator, and this.getEmail, this.getFullName, this.getUsername in LdapUserQuery...
Apache Archiva Injection Vulnerability
Apache Archiva is a suite of software from the Apache USA Software Foundation for managing one or more remote repositories. The software provides features such as remote Repository agents, role-based secure access management, and usage reporting. A security vulnerability exists in Apache Archiva...
CVE-2016-11077
An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account...
CVE-2016-11077
An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account...
CVE-2016-11068
An issue was discovered in Mattermost Server before 3.2.0. Attackers could read LDAP fields via injection...
CVE-2016-11068
An issue was discovered in Mattermost Server before 3.2.0. Attackers could read LDAP fields via injection...
Crlf injection
An issue was discovered in Mattermost Server before 3.2.0. Attackers could read LDAP fields via injection...
Design/Logic Flaw
An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account...
CVE-2016-11077
Mattermost Server prior to version 3.0.0 contains a superfluous API that allows the System Admin to change the account name and e-mail address of an LDAP account. This is documented across multiple sources (SUSE, Red Hat, GHSA, OSV) and is the stated impact; no further exploit details are provide...
CVE-2016-11077
An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account...
CVE-2016-11068
Mattermost Server prior to 3.2.0 is affected by an LDAP injection flaw that allows attackers to read LDAP fields. The issue is documented across multiple sources (NVD entry CVE-2016-11068, SUSE, Red Hat, OSV, and other feeds). The available descriptions consistently state that the vulnerability i...
CVE-2016-11068
An issue was discovered in Mattermost Server before 3.2.0. Attackers could read LDAP fields via injection...
CVE-2020-9495
Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login form. With certain characters it is possible to modify the LDAP filter used to query the LDAP users...
CVE-2020-9495
Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login form. With certain characters it is possible to modify the LDAP filter used to query the LDAP users...
Code injection
Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login form. With certain characters it is possible to modify the LDAP filter used to query the LDAP users...