Lucene search
+L

468 matches found

Prion
Prion
•added 2021/01/26 6:15 p.m.•24 views

Design/Logic Flaw

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service...

5CVSS7.2AI score0.1229EPSS
SaveExploits0References14Affected Software5
UbuntuCve
UbuntuCve
•added 2021/01/26 6:15 p.m.•35 views

CVE-2020-36229

A flaw was discovered in ldapX509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in adkeystring, resulting in denial of service...

7.5CVSS7AI score0.043EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/01/26 12:00 a.m.•13 views

OpenLDAP 安全漏洞

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A denial of service vulnerability exists in ldapX509dn2bv in OpenLDAP versions prior to 2.4.57. An attacker can exploit this vulnerability to cause a slapd crash in the X.509 DN resolution of...

7.5CVSS7AI score0.043EPSS
SaveExploits0References32
CNVD
CNVD
•added 2021/01/26 12:00 a.m.•14 views

OpenLDAP has an unspecified vulnerability

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A slapd security vulnerability exists in the X.509 DN parsing of decode.c bernextelement in OpenLDAP versions prior to 2.4.57. An attacker could exploit this vulnerability to cause a denial of servic...

7.5CVSS7AI score0.1229EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/01/26 12:00 a.m.•22 views

OpenLDAP Denial of Service Vulnerability (CNVD-2021-07937)

OpenLDAP is a free, open source implementation of the Lightweight Directory Access Protocol LDAP. A denial of service vulnerability exists in ldapX509dn2bv in OpenLDAP versions prior to 2.4.57. An attacker can exploit this vulnerability to cause a slapd crash in the X.509 DN resolution of...

7.5CVSS7AI score0.043EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/01/25 9:43 a.m.•40 views

CVE-2020-36229

A flaw was discovered in ldapX509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in adkeystring, resulting in denial of service...

7.4AI score0.043EPSS
SaveExploits0References14
AlpineLinux
AlpineLinux
•added 2021/01/25 9:43 a.m.•44 views

CVE-2020-36229

A flaw was discovered in ldapX509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in adkeystring, resulting in denial of service...

7.5CVSS7AI score0.043EPSS
SaveExploits0
CVE
CVE
•added 2021/01/25 9:43 a.m.•305 views

CVE-2020-36229

CVE-2020-36229 affects OpenLDAP prior to 2.4.57, where a flaw in ldap_X509dn2bv causes a slapd crash during X.509 DN parsing in ad_keystring, leading to denial of service. Public details confirm the vulnerability, its root cause in OpenLDAP’s X.509 DN parsing path, and that upgrading to OpenLDAP ...

7.5CVSS7AI score0.043EPSS
SaveExploits0References14Affected Software1
Cvelist
Cvelist
•added 2021/01/25 9:43 a.m.•28 views

CVE-2020-36230

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service...

7.5AI score0.1229EPSS
SaveExploits0References14
CVE
CVE
•added 2021/01/25 9:43 a.m.•357 views

CVE-2020-36230

CVE-2020-36230 is an OpenLDAP flaw (pre-2.4.57) causing an assertion failure in slapd during X.509 DN parsing in decode.c ber_next_element, leading to denial of service. Affected: OpenLDAP before 2.4.57. Mitigation: upgrade to OpenLDAP 2.4.57 or later (as indicated by OpenLDAP advisories and link...

7.5CVSS7AI score0.1229EPSS
SaveExploits0References14Affected Software1
AlpineLinux
AlpineLinux
•added 2021/01/25 9:43 a.m.•40 views

CVE-2020-36230

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service...

7.5CVSS7AI score0.1229EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/01/25 9:43 a.m.•29 views

CVE-2020-36230

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c bernextelement, resulting in denial of service...

7.5CVSS7AI score0.1229EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/01/25 12:00 a.m.•5 views

PT-2021-5550 · Openldap +7 · Openldap +7

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions prior to 2.4.57 Description: The issue is related to an assertion failure during syntactic analysis in the OpenLDAP implementation, which can be exploited by a remote attacker to cause a denial of service DoS by sending a...

7.8CVSS6.6AI score0.84994EPSS
SaveExploits1References158
Prion
Prion
•added 2020/11/09 10:15 p.m.•24 views

Authentication flaw

The LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise 4.x before 4.0.3, and Jet Enterprise 4.x through 4.2, doesn't verify properly the password in some system-user-dn scenarios. As a result, users clients/members can be authenticated even if they provide invalid password...

7.5CVSS9.4AI score0.01596EPSS
SaveExploits0References4Affected Software2
OSV
OSV
•added 2020/06/16 2:15 p.m.•5 views

CVE-2020-4320

IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403...

6.5CVSS6.3AI score0.00723EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•36 views

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2018-1007)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.08302EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•45 views

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2018-1398)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.3AI score0.08302EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•62 views

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1028)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7.9AI score0.94697EPSS
SaveExploits13References2
NVD
NVD
•added 2019/12/05 9:15 p.m.•25 views

CVE-2012-1115

A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the export, addvalueform, and dn parameters to cmd.php...

6.1CVSS5.8AI score0.01576EPSS
SaveExploits0References11
Prion
Prion
•added 2019/12/05 9:15 p.m.•25 views

Cross site scripting

A Cross-Site Scripting XSS vulnerability exists in LDAP Account Manager LAM Pro 3.6 in the export, addvalueform, and dn parameters to cmd.php...

4.3CVSS5.8AI score0.01576EPSS
SaveExploits0References11Affected Software3
Rows per page
Query Builder