UBUNTU-CVE-2022-39050

An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL link. Then the stored JavaScript is executed in the context of OTRS. The same issue applies for the usage of external...

Samba 资源管理错误漏洞

Samba is the standard Windows interoperability program suite for Linux and Unix. A resource management error vulnerability exists in versions of Samba prior to 4.16.4, which stems from the AD DC Database Audit Logging module being able to access the value of an LDAP message that has been released...

CVE-2021-30651

A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access...

The vulnerability of the LSARPC interface method in the Windows LSA component of the Windows operating system allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of the LSARPC interface method in the Windows LSA component of the Windows operating system is related to the possibility of bypassing the authentication mechanism. Exploiting this vulnerability allows a malicious actor to execute a “man-in-the-middle” attack by redirecting NTLM...

CVE-2022-22975

An issue was discovered in the Pinniped Supervisor with either LADPIdentityProvider or ActiveDirectoryIdentityProvider resources. An attack would involve the malicious user changing the common name CN of their user entry on the LDAP or AD server to include special characters, which could be used ...

April 25, 2022-KB5012159 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 11

None None...

CVE-2022-0564

A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An attacker could exploit this vulnerability by sending authentication requests to an affected system. A successful exploit could allow the attacker to compare the response time...

CVE-2022-21857

Active Directory Domain Services Elevation of Privilege Vulnerability...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the Active Directory Domain Services component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

PT-2021-5301 · Microsoft · Active Directory Domain Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Domain Services affected versions not specified Description: The issue is related to insufficient access control in Active Directory Domain Services, which can be exploited by a remote attacker to elevate their privileges...

PT-2021-7948 · Microsoft +4 · System.Directoryservices.Protocols +4

Name of the Vulnerable Software and Affected Versions: System.DirectoryServices.Protocols version 5.0.0 Description: A information disclosure issue exists where System.DirectoryServices.Protocols.LdapConnection may send credentials in plain text on Linux. This could allow a remote attacker to...

IBM Security Verify Bridge 安全漏洞

IBM Security Verify Bridge is an IBM application component from International Business Machines IBM, Inc. provides IBM Cloud access to user attributes and authentication that are controlled by the client's local LDAP or Active Directory. A security vulnerability exists in IBM Security Verify Brid...

IBM Security Verify Bridge 加密问题漏洞

IBM Security Verify Bridge is an IBM application component from International Business Machines IBM, Inc. provides IBM Cloud access to user attributes and authentication that are controlled by the client's local LDAP or Active Directory. A security vulnerability exists in IBM Security Verify Brid...

LIVE Webinar on Zerologon Vulnerability: Technical Analysis and Detection

I am sure that many of you have by now heard of a recently disclosed critical Windows server vulnerability—called Zerologon—that could let hackers completely take over enterprise networks. For those unaware, in brief, all supported versions of the Windows Server operating systems are vulnerable t...

Denial Of Service (DoS)

cups is vulnerable to denial of service DoS. The vulnerability exists as a use-after-free flaw was found in the CUPS scheduler directory services routine, used to process data about available printers and printer classes...

CVE-2019-9565

Druide Antidote RX, HD, 8 before 8.05.2287, 9 before 9.5.3937 and 10 before 10.1.2147 allows remote attackers to steal NTLM hashes or perform SMB relay attacks upon a direct launch of the product, or upon an indirect launch via an integration such as Chrome, Firefox, Word, Outlook, etc. This occu...

DEBIAN-CVE-2017-2668

389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind requests are handled. A remote unauthenticated attacker could use this flaw to make ns-slapd crash via a specially crafted LDAP bind request, resulting in denial of service...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server, OpenSSL, HTTP server, IBM Tivoli Monitoring, SmartCloud Cost Management, Tivoli Directory Services shipped with IBM Service Delivery Manager (CVE-2014-3513, C

Summary WebSphere Application Server, OpenSSL, HTTP server, IBM Tivoli Monitoring, SmartCloud Cost Management, Tivoli Directory Services are shipped as a components of IBM Service Delivery Manager. Information about a security vulnerability affecting WebSphere Application Services, HTTP server, I...

OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)

It was discovered that the LDAPCertStore class in the JNDI component of OpenJDK failed to securely handle LDAP referrals. An attacker could possibly use this flaw to make it fetch attacker controlled certificate data...

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02271)

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation.Oracle Internet Directory OID is a standards-based LDAP directory component used to centrally store and manage web Service Names. A security vulnerability exists in t...