Lucene search
+L

1326 matches found

Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2012-1568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ExecShield feature in a certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux RHEL 5 and 6 and Fedora 15 and 16 does not properly handle us...

1.9CVSS5.5AI score0.00361EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2016-4449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XML external entity XXE vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows...

7.1CVSS7.3AI score0.01661EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/03 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2010-3702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other...

7.5CVSS6.7AI score0.02757EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/02/21 12:00 a.m.•24 views

F5 Networks BIG-IP : zlib vulnerability (K000149905)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K000149905 advisory. inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper...

8.8CVSS7.1AI score0.04793EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/02/21 12:00 a.m.•18 views

F5 Networks BIG-IP : zlib vulnerability (K000149915)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K000149915 advisory. inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper...

9.8CVSS7.1AI score0.0755EPSS
SaveExploits0References2
OSV
OSV
•added 2025/01/28 3:15 p.m.•15 views

CVE-2024-7881

An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those contents as an address that is also dereferenced...

6.9AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/28 3:01 p.m.•29 views

CVE-2024-7881

An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those contents as an address that is also dereferenced...

0.00196EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•3 views

CVE-2024-7881: Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution

An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those contents as an address that is also dereferenced...

5.1CVSS5.8AI score0.00196EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•10 views

PT-2025-30843

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM scheduler where scheduled fences may not be properly signaled when a job is killed. This can occur when a job from one application depends on a...

5.5CVSS6.5AI score0.00133EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2024/12/04 11:12 p.m.•33 views

CVE-2024-38829

A flaw was found in Spring LDAP. The usage of String.toLowerCase and String.toUpperCase has some locale dependent exceptions that could result in unintended columns being queried...

3.7CVSS6.6AI score0.00371EPSS
SaveExploits0References4
OSV
OSV
•added 2024/12/04 9:30 p.m.•15 views

GHSA-MQVR-2RP8-J7H4 Spring LDAP data exposure vulnerability

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

6.3CVSS6.8AI score0.00371EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/12/04 9:30 p.m.•47 views

Spring LDAP data exposure vulnerability

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS3.8AI score0.00371EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/12/04 9:15 p.m.•10 views

DEBIAN-CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS4.9AI score0.00371EPSS
SaveExploits0References1
Mend
Mend
•added 2024/12/04 9:06 p.m.•0 views

CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

6.3CVSS0.00371EPSS
SaveExploits0References3
CVE
CVE
•added 2024/12/04 9:06 p.m.•350 views

CVE-2024-38829

CVE-2024-38829 is described as a vulnerability in Spring LDAP that enables data exposure due to case-sensitive comparisons. The issue affects Spring LDAP versions ranging from the earliest releases up to 2.4.3, and then 3.0.0–3.0.9, 3.1.0–3.1.7, and 3.2.0–3.2.7, including all versions prior to 2....

3.7CVSS3.8AI score0.00371EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/04 9:06 p.m.•48 views

CVE-2024-38829 Spring LDAP sensitive data exposure for case-sensitive comparisons

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS0.00371EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2024/12/04 9:06 p.m.•41 views

CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS4.9AI score0.00371EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2024/12/02 9:20 p.m.•31 views

CVE-2024-38827

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

4.8CVSS6.7AI score0.00377EPSS
SaveExploits0References4
OSV
OSV
•added 2024/12/02 3:31 p.m.•24 views

GHSA-Q3V6-HM2V-PW99 Spring Framework has Authorization Bypass for Case Sensitive Comparisons

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

6.3CVSS5.9AI score0.00377EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2024/12/02 3:31 p.m.•123 views

Spring Framework has Authorization Bypass for Case Sensitive Comparisons

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

4.8CVSS6.8AI score0.00377EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder