Lucene search
+L

1559 matches found

CNNVD
CNNVD
added 2022/06/14 12:00 a.m.10 views

Microsoft Lightweight Directory Access Protocol 安全漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory service protocol from Microsoft that runs on a layer above the TCP/IP stack. A security vulnerability exists in Microsoft Lightweight Directory Access Protocol, which affects the following products and versions: Windows 8.1 for...

8.8CVSS8.2AI score0.02465EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/06/14 12:00 a.m.13 views

Apache Flume 安全漏洞

Apache Flume is a distributed, reliable and available service from the Apache Foundation. A remote code execution vulnerability exists in Apache Flume, which stems from the configuration of a JMS source with a JNDI LDAP data source URI, and could be exploited by an attacker to cause a remote code...

9.8CVSS6.6AI score0.05075EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/06/14 12:00 a.m.93 views

KB5014697: Windows 11 Security Update (June 2022)

The remote Windows host is missing security update 5014697. It is, therefore, affected by multiple vulnerabilities - Windows Kerberos Elevation of Privilege Vulnerability CVE-2022-30165 - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability CVE-2022-30139,...

9.3CVSS7.2AI score0.99234EPSS
SaveExploits63References29
Tenable Nessus
Tenable Nessus
added 2022/06/14 12:00 a.m.474 views

KB5014678: Windows Server 2022 Security Update (June 2022)

The remote Windows host is missing security update 5014678. It is, therefore, affected by multiple vulnerabilities - Windows Kerberos Elevation of Privilege Vulnerability CVE-2022-30165 - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability CVE-2022-30139,...

9.3CVSS7.2AI score0.99234EPSS
SaveExploits63References24
Microsoft CVE
Microsoft CVE
added 2022/06/09 7:00 a.m.10 views

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S) IMAP(S) POP3(S) and LDAP(S) (openldap only).

...

8.1CVSS6.8AI score0.02161EPSS
SaveExploits1
CNVD
CNVD
added 2022/06/09 12:00 a.m.56 views

Nginx NJS Denial of Service Vulnerability (CNVD-2022-66506)

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx Inc. njs is one of the scripting language components that supports extended NGINX functionality . A denial of service vulnerability exists in Nginx NJS version v0.7.2, which stems from a segmentatio...

5.5CVSS5.4AI score0.00384EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/06/09 12:00 a.m.14 views

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems arises due to insufficient validation of input data. This allows attackers to trigger a service failure.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.3AI score0.0327EPSS
SaveExploits0References3
OSV
OSV
added 2022/06/06 7:10 p.m.22 views

CVE-2022-24840 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in django-s3file

django-s3file is a lightweight file upload input for Django and Amazon S3 . In versions prior to 5.5.1 it was possible to traverse the entire AWS S3 bucket and in most cases to access or delete files. If the AWSLOCATION setting was set, traversal was limited to that location only. The issue was...

9.1CVSS9.2AI score
SaveExploits0References4
CNVD
CNVD
added 2022/06/06 12:00 a.m.23 views

Binary vulnerability in mruby

mruby is a lightweight implementation of the Ruby language that runs Ruby code using interpreted mode and executes it in a virtual machine. A binary vulnerability exists in mruby that can be exploited by an attacker to cause a denial of service attack...

7.8CVSS6.8AI score0.00398EPSS
SaveExploits1
Fedora
Fedora
added 2022/06/05 1:12 a.m.16 views

[SECURITY] Fedora 36 Update: dotnet3.1-3.1.419-1.fc36

.NET Core is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET Core contains a runtime conforming to .NET Standards a set of...

2.1AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
added 2022/06/04 12:00 a.m.44 views

Tutorial: How to Build Your First Node.js gRPC API

Compared to other API technologies like REST and GraphQL, gRPC is lightweight and exceptionally robust, thanks in large part to its use of protobufs. Interested in exploring how to build your own API? Read on to see how easy it is to do so with Node.js and gRPC...

2.3AI score
SaveExploits0
CNVD
CNVD
added 2022/05/31 12:00 a.m.63 views

Gitea Cross-Site Scripting Vulnerability (CNVD-2022-66680)

Gitea is a lightweight Go-based git service developed by the Gitea community. cross-site scripting vulnerabilities exist in versions of Gitea prior to 1.16.9. No detailed vulnerability details are currently available...

3.5CVSS2.1AI score0.0079EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2022/05/26 5:15 p.m.8 views

ALPINE-CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...

8.1CVSS7AI score0.02161EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:00 a.m.14 views

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by transmitting specially crafted data...

9CVSS8.1AI score0.02803EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/05/10 9:15 p.m.8 views

CVE-2022-29128

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

9CVSS5.9AI score0.02803EPSS
SaveExploits0References3Affected Software26
OSV
OSV
added 2022/05/10 9:15 p.m.6 views

CVE-2022-29139

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.02351EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/10 9:15 p.m.4 views

CVE-2022-29131

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

8.8CVSS7.4AI score0.02803EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/10 9:15 p.m.16 views

CVE-2022-29130

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

9.8CVSS5.9AI score0.03803EPSS
SaveExploits0References3Affected Software26
OSV
OSV
added 2022/05/10 9:15 p.m.10 views

CVE-2022-29130

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

9.8CVSS7.4AI score0.03803EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/10 9:15 p.m.5 views

CVE-2022-29129

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

9CVSS5.9AI score0.02803EPSS
SaveExploits0References3Affected Software26
Rows per page
Query Builder