CVE-2020-5281

In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input...

Input validation

In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input...

CVE-2020-5281

In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input...

CVE-2020-5281 LDAP connector injection in Perun

In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input...

CVE-2020-5281

Summary of CVE-2020-5281 (Perun LDAP extSource): Perun before version 3.9.1 is affected. The vulnerability arises when a VO or group manager can modify the LDAP extSource configuration, enabling retrieval of all entries from Perun LDAP. The issue is remedied in version 3.9.1 through input sanitis...

Security Bulletin: Authentication vulnerability affects IBM Integration Bus V10.0.0.4 onwards (CVE-2016-8918 )

Summary Web user accounts can be authenticated against an LDAP server, in IBM Integration Bus V10.0.0.4 and later versions. However, under some circumstances it is possible for a remote user to be authenticated without providing valid credentials. Vulnerability Details CVEID: CVE-2016-8918...

CVE-2020-10819

Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ username parameter...

CVE-2020-10820

Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ password parameter...

CVE-2020-10819

Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ username parameter...

Cross site scripting

Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ username parameter...

Cross site scripting

Nagios XI 5.6.11 allows XSS via the includes/components/ldapadintegration/ password parameter...

CVE-2020-10819

CVE-2020-10819 affects Nagios XI 5.6.11 with a cross-site scripting (XSS) vulnerability in the web interface, specifically via the includes/components/ldap_ad_integration/ username parameter. The root cause is lack of proper validation of client-side data by the WEB application, according to mult...

CVE-2020-10820

CVE-2020-10820 affects Nagios XI 5.6.11. The issue is a Cross-Site Scripting (XSS) vulnerability in the web interface, exploitable via the includes/components/ldap_ad_integration/ password parameter. The CVE entry provides the vulnerability description and CVSS metrics (NVD: CVSSv2 base score 3.5...

Openfire < 4.4.2 Multiple Vulnerabilities

Openfire is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:igniterealtime:openfire";...

[SECURITY] Fedora 32 Update: sympa-6.2.54-1.fc32

Sympa is scalable and highly customizable mailing list manager. It can cope with big lists 200,000 subscribers and comes with a complete user and admin Web interface. It is internationalized, and supports the us, fr, de, es, it, fi, and chinese locales. A scripting language allows you to extend t...

[SECURITY] Fedora 30 Update: sympa-6.2.54-1.fc30

Sympa is scalable and highly customizable mailing list manager. It can cope with big lists 200,000 subscribers and comes with a complete user and admin Web interface. It is internationalized, and supports the us, fr, de, es, it, fi, and chinese locales. A scripting language allows you to extend t...

Fedora: Security Advisory for sympa (FEDORA-2020-bb5aa250c9)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: sympa-6.2.54-1.fc31

Sympa is scalable and highly customizable mailing list manager. It can cope with big lists 200,000 subscribers and comes with a complete user and admin Web interface. It is internationalized, and supports the us, fr, de, es, it, fi, and chinese locales. A scripting language allows you to extend t...

CVE-2019-5648

Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware = v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be us...

Code injection

Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware = v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be us...