4 matches found
CVE-2026-57962
A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily large amounts of attacker-supplied data into the Thunderbird LDAP client until it crashes due to memory exhaustion. This vulnerability was fixed in Thunderbird 152.0.1 and...
Linux Distros Unpatched Vulnerability : CVE-2018-12022
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled either globally or for a specific...
JNDI Exploit Pathname Restriction Disclosure
The vulnerability of the handleFileRequest function in src/main/java/com/feihong/ldap/HTTPServer.java of the JNDI exploitation tool is related to vulnerabilities in pathname restrictions. Exploiting this vulnerability can allow an attacker to disclose sensitive information...