Input validation

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access...

CVE-2015-7882

CVE-2015-7882 affects MongoDB Server 3.0.0–3.0.6, where improper handling of LDAP authentication can allow an unauthenticated client to gain unauthorized access. The CNVD entry confirms versions 3.0.0 through 3.0.6 are vulnerable and can lead to unauthorized access; other connected records reiter...

CVE-2015-7882 Authentication bypass when using LDAP authentication in MongoDB Enterprise Server

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access...

CVE-2015-7882

Removed by vendor...

Oracle Solaris Critical Patch Update : jul2019_SRU11_4_11_4_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Sun Systems Products Suite component: Open Fabrics Tools. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows...

Youzer - Fake User Generator For Active Directory Environments

Fake User Generator for Active Directory Environments Introduction The goal of Youzer is to create information rich Active Directory environments. This uses the python3 library 'faker' to generate random accounts. pip3 install faker You can either supply a wordlist or have the passwords generated...

CVE-2019-4297

IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability to make unauthorized queries or modify the LDAP content. IBM X-Force ID: 160761...

Code injection

IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability to make unauthorized queries or modify the LDAP content. IBM X-Force ID: 160761...

CVE-2019-4297

IBM Robotic Process Automation with Automation Anywhere (version 11) is affected by CVE-2019-4297 due to an LDAP injection in the LDAP handling path. The vulnerability allows a remote authenticated attacker to craft requests that can query or modify LDAP content. The IBM security bulletin confirm...

CVE-2019-4297

IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability to make unauthorized queries or modify the LDAP content. IBM X-Force ID: 160761...

PT-2019-17021 · Ibm +1 · Ibm Robotic Process Automation +1

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation with Automation Anywhere version 11 Description: The issue allows a remote authenticated attacker to conduct an LDAP injection by using a specially crafted request. This could enable the attacker to make...

Security Bulletin: IBM Robotic Process Automation is vulnerable to LDAP Injection (CVE-2019-4297)

Summary IBM Robotic Process Automation is vulnerable to LDAP Injection. Vulnerability Details CVEID: CVE-2019-4297 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, a...

Samba 4.10.0 < 4.10.5 DoS Vulnerability (CVE-2019-12436)

Samba is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba";...

4.10.0 < 4.10.5 AC DC LDAP Server Denial of Service Vulnerability (CVE-2019-12436)

The version of Samba running on the remote host is 4.10.0 prior to 4.10.5. It is, therefore, potentially affected by a denial of service vulnerability in the AD DC LDAP server process. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Ubuntu 19.04 : samba vulnerabilities (USN-4018-1)

It was discovered that Samba incorrectly handled certain RPC messages. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. CVE-2019-12435 It was discovered that Samba incorrectly handled LDAP pages searches. A remote attacker could possibly u...

USN-4018-1: Samba vulnerabilities

It was discovered that Samba incorrectly handled certain RPC messages. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. CVE-2019-12435 It was discovered that Samba incorrectly handled LDAP pages searches. A remote attacker could possibly u...

CVE-2019-12436

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit...

Null pointer dereference

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit...

CVE-2019-12436

CVE-2019-12436 affects Samba 4.10.x up to 4.10.5, where a NULL pointer dereference in the AD DC LDAP server occurs via the paged search control, causing a Denial of Service. Exploitation is described as requiring directory read access and does not imply remote code execution. Public details indic...

CVE-2019-12436

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit...