Lucene search
+L

11170 matches found

Microsoft CVE
Microsoft CVE
added 2024/12/10 8:00 a.m.45 views

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

...

8.1CVSS7.1AI score0.01396EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2024/12/10 8:00 a.m.23 views

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

...

8.1CVSS7.1AI score0.01273EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2024/12/10 8:00 a.m.38 views

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

...

7.5CVSS7AI score0.82992EPSS
SaveExploits7
Microsoft CVE
Microsoft CVE
added 2024/12/10 8:00 a.m.87 views

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

...

9.8CVSS7AI score0.70906EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2024/12/10 12:00 a.m.19 views

KB5048735: Windows Server 2012 R2 Security Update (December 2024)

The remote Windows host is missing security update 5048735. It is, therefore, affected by multiple vulnerabilities - Input Method Editor IME Remote Code Execution Vulnerability CVE-2024-49079 - Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2024-49090 - Windows...

9.8CVSS8.8AI score0.82992EPSS
SaveExploits14References29
Tenable Nessus
Tenable Nessus
added 2024/12/10 12:00 a.m.18 views

KB5048654: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (December 2024)

The remote Windows host is missing security update 5048654 or hotpatch 5048800. It is, therefore, affected by multiple vulnerabilities - Input Method Editor IME Remote Code Execution Vulnerability CVE-2024-49079 - Windows Common Log File System Driver Elevation of Privilege Vulnerability...

9.8CVSS8.7AI score0.82992EPSS
SaveExploits14References44
Tenable Nessus
Tenable Nessus
added 2024/12/10 12:00 a.m.23 views

KB5048667: Windows 11 Version 24H2 / Windows Server 2025 Security Update (December 2024)

The remote Windows host is missing security update 5048667 or hotpatch 5048794. It is, therefore, affected by multiple vulnerabilities - Input Method Editor IME Remote Code Execution Vulnerability CVE-2024-49079 - Windows Common Log File System Driver Elevation of Privilege Vulnerability...

9.8CVSS8.7AI score0.82992EPSS
SaveExploits14References60
Tenable Nessus
Tenable Nessus
added 2024/12/10 12:00 a.m.14 views

KB5048699: Windows Server 2012 Security Update (December 2024)

The remote Windows host is missing security update 5048699. It is, therefore, affected by multiple vulnerabilities - Input Method Editor IME Remote Code Execution Vulnerability CVE-2024-49079 - Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2024-49090 - Windows...

9.8CVSS8.8AI score0.82992EPSS
SaveExploits14References29
Microsoft CVE
Microsoft CVE
added 2024/12/09 8:00 a.m.8 views

OOB access in ldap_escape

...

9.8CVSS6.4AI score0.01284EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2024/12/04 11:12 p.m.29 views

CVE-2024-38829

A flaw was found in Spring LDAP. The usage of String.toLowerCase and String.toUpperCase has some locale dependent exceptions that could result in unintended columns being queried...

3.7CVSS6.6AI score0.00379EPSS
SaveExploits0References4
OSV
OSV
added 2024/12/04 9:30 p.m.11 views

GHSA-MQVR-2RP8-J7H4 Spring LDAP data exposure vulnerability

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

6.3CVSS6.8AI score0.00379EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2024/12/04 9:30 p.m.39 views

Spring LDAP data exposure vulnerability

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS3.8AI score0.00379EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/12/04 9:15 p.m.65 views

CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS0.00379EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/04 9:15 p.m.25 views

CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

6.5AI score
SaveExploits0References1
OSV
OSV
added 2024/12/04 9:15 p.m.6 views

DEBIAN-CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS4.9AI score0.00379EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/04 9:15 p.m.6 views

UBUNTU-CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS6.5AI score0.00379EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/12/04 9:06 p.m.42 views

CVE-2024-38829 Spring LDAP sensitive data exposure for case-sensitive comparisons

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS0.00379EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/04 9:06 p.m.340 views

CVE-2024-38829

CVE-2024-38829 is described as a vulnerability in Spring LDAP that enables data exposure due to case-sensitive comparisons. The issue affects Spring LDAP versions ranging from the earliest releases up to 2.4.3, and then 3.0.0–3.0.9, 3.1.0–3.1.7, and 3.2.0–3.2.7, including all versions prior to 2....

3.7CVSS3.8AI score0.00379EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/04 9:06 p.m.23 views

CVE-2024-38829 Spring LDAP sensitive data exposure for case-sensitive comparisons

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS3.8AI score0.00379EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2024/12/04 9:06 p.m.37 views

CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS4.9AI score0.00379EPSS
SaveExploits0
Rows per page
Query Builder