Lucene search
+L

12618 matches found

ATTACKERKB
ATTACKERKB
added 2022/06/09 4:15 a.m.5 views

CVE-2022-25805

An issue was discovered in the IGEL Universal Management Suite UMS 6.07.100. The transmission of cleartext LDAP bind credentials by the cmdmgtloadmgttree command allows an attacker who can intercept or inspect traffic between an authenticated UMS client and server to compromise those LDAP bind...

6.5CVSS6.6AI score0.00583EPSS
SaveExploits1References3
Prion
Prion
added 2022/06/09 4:15 a.m.25 views

Design/Logic Flaw

An issue was discovered in the IGEL Universal Management Suite UMS 6.07.100. The transmission of cleartext LDAP bind credentials by the cmdmgtloadmgttree command allows an attacker who can intercept or inspect traffic between an authenticated UMS client and server to compromise those LDAP bind...

4CVSS6.5AI score0.00583EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2022/06/09 12:45 a.m.96 views

CVE-2022-25807

IGEL Universal Management Suite (UMS) 6.07.100 contains a hardcoded DES key in the LDAPDesPWEncrypter class. This allows an attacker who gains access to encrypted LDAP bind credentials to decrypt them using a static 8-byte DES key. The connected documents provide concrete details of the affected ...

5.5CVSS5.4AI score0.00295EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
added 2022/06/07 12:00 a.m.18 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2022-1783)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7.3AI score0.03357EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/06/07 12:00 a.m.14 views

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2022-1800)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7.3AI score0.03357EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/06 10:37 a.m.11 views

CLSA-2022-1654511849 Fixed CVE-2021-25219 in bind

CVE-2021-25219: fix possible performance degradation by disabling lame-ttl cache...

5.3CVSS6.4AI score0.10576EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/06/06 12:00 a.m.34 views

EulerOS 2.0 SP10 : bind (EulerOS-SA-2022-1783)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-S1 Versions of...

6.8CVSS7AI score0.03357EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/06/06 12:00 a.m.36 views

EulerOS 2.0 SP10 : bind (EulerOS-SA-2022-1800)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-S1 Versions of...

6.8CVSS7AI score0.03357EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/02 2:15 p.m.7 views

CVE-2022-23236

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users...

4.4CVSS5.8AI score0.0017EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/02 2:15 p.m.21 views

CVE-2022-23236

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users...

4.4CVSS0.0017EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/02 1:17 p.m.13 views

CLSA-2022-1654175851 Fixed CVE-2021-25219 in bind

CVE-2021-25219: fix possible performance degradation by disabling lame-ttl cache...

5.3CVSS6.4AI score0.10576EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/06/02 12:00 a.m.10 views

Netapp E-Series SANtricity OS Controller Software 安全漏洞

Netapp E-Series SANtricity OS Controller Software is a disk array OS controller software from Netapp Inc. in the United States. A security vulnerability exists in Netapp E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2. An attacker could exploit the vulnerability by stori...

4.4CVSS5.3AI score0.0017EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/06/01 1:46 p.m.31 views

CVE-2022-23236

E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users...

5AI score0.0017EPSS
SaveExploits0References1
CVE
CVE
added 2022/06/01 1:46 p.m.82 views

CVE-2022-23236

CVE-2022-23236 affects NetApp E-Series SANtricity OS Controller Software versions 11.40–11.70.2. The vulnerability arises from storing the LDAP BIND password in plaintext in a file accessible to privileged users, creating a confidentiality risk for LDAP credentials. The available documents do not...

4.4CVSS4.7AI score0.0017EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/06/01 12:00 a.m.38 views

SUSE SLES12: bind / bind-chrootenv / bind-doc / bind-libs / bind-libs-32bit / etc (SUSE-SU-2022:1616-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1616-1 advisory. - CVE-2021-25220: Fixed potentially incorrect answers by cached forwarders bsc1197135. Tenable has extracted the preceding description block...

6.8CVSS6.7AI score0.03357EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/06/01 12:00 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2022:1616-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS7.3AI score0.03357EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/31 12:21 p.m.4 views

SUSE-SU-2022:1616-1 Security update for bind

This update for bind fixes the following issues: - CVE-2021-25220: Fixed potentially incorrect answers by cached forwarders bsc1197135...

6.8CVSS6.8AI score0.03357EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2022/05/31 6:50 a.m.31 views

Security Bulletin: Vulnerability in bind (CVE-2021-25214) affects Power HMC

Summary BIND is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE Vulnerability Details CVEID: CVE-2021-25214 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a broken inbound incremental zone update IXFR. By sending a specially crafted IXFR,...

6.5CVSS6.5AI score0.05989EPSS
SaveExploits0Affected Software2
OPENSUSE Linux
OPENSUSE Linux
added 2022/05/27 12:00 a.m.63 views

Security update for bind (moderate)

SUSE Security Update: Security update for bind Announcement ID: openSUSE-SU-2022:0151-1 Rating: moderate References: 1192146 1199370 Cross-References: CVE-2021-25219 CVE-2022-27114 CVSS scores: CVE-2021-25219 NVD : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-25219 SUSE: 5.3...

5.5CVSS6.4AI score0.10576EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:00 a.m.12 views

The vulnerability of the llcp_sock_bind() function in the NFC protocol of the Linux operating system allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the llcpsockbind function in the NFC protocol of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker acting locally to gain access to confidential data, compromise its integrity, and cause...

7.8CVSS6.4AI score0.00589EPSS
SaveExploits1References36Affected Software5
Rows per page
Query Builder