Lucene search
+L

5 matches found

OSV
OSV
•added 2026/07/13 5:16 p.m.•16 views

UBUNTU-CVE-2026-13221

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perlstudychunk. When such branches are combined into a trie, the...

9.1CVSS5.8AI score0.00432EPSS
SaveExploits0References7
Veracode
Veracode
•added 2022/07/06 7:52 p.m.•38 views

Remote Code Execution (RCE)

ldap-account-manager:sid is vulnerable to remote code execution. LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf...

8.8CVSS9.2AI score0.02288EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2022/06/27 8:50 p.m.•15 views

CVE-2022-31086 Incorrect Regular Expressions in ldap-account-manager

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf. This vulnerability could lead to a Remote Code Execution if the...

6.6CVSS7.3AI score0.02288EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/06/27 8:50 p.m.•50 views

CVE-2022-31086 Incorrect Regular Expressions in ldap-account-manager

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf. This vulnerability could lead to a Remote Code Execution if the...

6.6CVSS9.2AI score0.02288EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/27 12:00 a.m.•3 views

CVE-2017-17843: Undefined Security Weakness

An issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of an intended public key for encryption, because incorrect regular expressions are used for extraction of an e-mail address from a comma-separated list, as demonstrated by a modified Full Name field and ...

5.9CVSS6.7AI score0.01119EPSS
SaveExploits0References1
Rows per page
Query Builder