942 matches found
KLA19245 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...
KB5017365: Windows 8.1 and Windows Server 2012 R2 Security Update (September 2022)
The remote Windows host is missing security update 5017365. It is, therefore, affected by multiple vulnerabilities - Windows Credential Roaming Service Elevation of Privilege Vulnerability CVE-2022-30170 - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
AZL-37015 CVE-2022-32746 affecting package samba for versions less than 4.18.3-1
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl...
CVE-2022-32745
A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault...
YugabyteDB 授权问题漏洞
YugabyteDB is a high-performance transactional distributed SQL database for cloud-native applications from Yugabyte USA. A security vulnerability exists in YugabyteDB version 2.6.1 that stems from a vulnerability that allows authentication to be bypassed using a null password when anonymous or...
LDAP Injection Authentication Bypass
Lightweight Directory Access Protocol LDAP is used by web applications to access and maintain directory information services. One of the most common uses for LDAP is to provide a Single-Sign-On SSO service that will allow clients to authenticate with a web site without any interaction assuming...
UBUNTU-CVE-2022-32745
A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault...
389-ds-base: sending crafted message could result in DoS
A vulnerability was found in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection. No bind or other authentication is required. This...
IBM Sterling Partner Engagement Manager 注入漏洞
IBM Sterling Partner Engagement Manager is an automation management tool from IBM U.S.A. An LDAP injection vulnerability exists in IBM Sterling Partner Engagement Manager, which stems from the fact that some parameters in the code are not properly filtered and can be exploited by an authenticated...
CVE-2022-22360
IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and could result in in granting permission to unauthorized resources...
LDAP Code Execution
The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
LDAP Code Execution
The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2022-30153
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
CVE-2022-30161
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
CVE-2022-30149
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
CVE-2022-30146
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
Remote code execution
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
Remote code execution
Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...
