Lucene search
+L

11834 matches found

Microsoft CVE
Microsoft CVE
added 2026/08/11 2:00 p.m.29 views

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...

8.8CVSS5.5AI score0.00607EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/11 2:00 p.m.19 views

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...

8.8CVSS5.7AI score0.00837EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/11 8:48 a.m.16 views

Security Bulletin: Vulnerability in SSSD affects IBM Netezza Appliance

Summary The SSSD package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-14474 Vulnerability Details CVEID:CVE-2026-14474 DESCRIPTION: A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured,...

8.8CVSS5.3AI score0.00568EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/08/11 7:17 a.m.14 views

CVE-2026-19391

A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords ldapdefaultauthtok and Pacemaker fence device credentials to be included in cleartext in archives uploaded to...

6.5CVSS0.00151EPSS
SaveExploits0References2
attackerkb
attackerkb
added 2026/08/11 6:25 a.m.13 views

CVE-2026-19391

A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords ldapdefaultauthtok and Pacemaker fence device credentials to be included in cleartext in archives uploaded to...

6.5CVSS5.2AI score0.00151EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/11 6:25 a.m.16 views

EUVD-2026-55951

A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords ldapdefaultauthtok and Pacemaker fence device credentials to be included in cleartext in archives uploaded to...

6.5CVSS5.2AI score0.00151EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/11 6:25 a.m.17 views

CVE-2026-19391

A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords ldapdefaultauthtok and Pacemaker fence device credentials to be included in cleartext in archives uploaded to...

6.5CVSS5.2AI score0.00151EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.11 views

PT-2026-70918

A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied...

4.3CVSS5.3AI score0.0023EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/11 12:00 a.m.37 views

KB5120249: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (August 2026)

The remote Windows host is missing security update 5120249. It is, therefore, affected by multiple vulnerabilities - Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...

8.8CVSS7.3AI score0.06184EPSS
SaveExploits11References160
Tenable Nessus
Tenable Nessus
added 2026/08/11 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-19391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows...

6.5CVSS5.4AI score0.00151EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.11 views

PT-2026-70537

Name of the Vulnerable Software and Affected Versions Windows LDAP affected versions not specified Description A heap-based buffer overflow in the Lightweight Directory Access Protocol LDAP allows an unauthorized attacker to execute arbitrary code over a network, potentially compromising the...

8.8CVSS6AI score0.00837EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.16 views

PT-2026-70074

Name of the Vulnerable Software and Affected Versions insights-core affected versions not specified Description A flaw in the password redaction layer fails to recognize credentials that are not keyed under the literal string 'password'. This issue allows SSSD LDAP bind passwords, specifically th...

6.5CVSS5.1AI score0.00151EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.13 views

PT-2026-70544

Name of the Vulnerable Software and Affected Versions Windows LDAP affected versions not specified Description A use after free issue in the Lightweight Directory Access Protocol LDAP allows an unauthorized attacker to execute arbitrary code over a network, potentially affecting the system...

8.8CVSS5.7AI score0.00607EPSS
SaveExploits0References5
FreeBSD
FreeBSD
added 2026/08/09 12:00 a.m.12 views

Roundcube -- Multiple vulnerabilities

The Roundcube project reports: Missing basic validation for content proxied by the css proxy SSRF bypass via specific local address URLs using 100.64.0.0/10 and fe80::/10 nets SSRF filter bypass via various forms of nip.io/sslip.io hostnames evading islocalurl check remote content blocking bypass...

5.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/08/08 12:00 a.m.21 views

openSUSE 16: ctdb / ctdb-pcp-pmda / ldb-tools / libldb-devel / libldb2 / etc (openSUSE-SU-2026:21540-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21540-1 advisory. Update to 4.22.11. Security issues fixed: - CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify...

9.8CVSS6.5AI score0.1393EPSS
SaveExploits9References40
OSV
OSV
added 2026/08/07 2:44 a.m.14 views

OESA-2026-3296 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's KDC password change kpasswd service. When processing malformed ASN.1-encoded Kerberos password change request, Samba...

8.8CVSS5.8AI score0.0062EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/07 2:44 a.m.12 views

OESA-2026-3295 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's KDC password change kpasswd service. When processing malformed ASN.1-encoded Kerberos password change request, Samba...

8.8CVSS5.8AI score0.0062EPSS
SaveExploits0References7
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/06 1:39 p.m.20 views

Security Bulletin: Due to the use of Bouncy Castle Inc. BC-JAVA bcprov IBM webMethods Managed File Transfer is vulnerable to a Covert Timing Channel vulnerability and Use of a Broken or Risky Cryptographic Algorithm vulnerability

Summary Bouncy Castle Inc. BC-JAVA bcprov is used by IBM webMethods Managed File Transfer CVE-2025-14813, CVE-2026-5598, CVE-2026-0636 Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JA...

9.9CVSS6.6AI score0.00899EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2026/08/06 9:33 a.m.13 views

OPENSUSE-SU-2026:21540-1 Security update for samba

This update for samba fixes the following issues: Update to 4.22.11. Security issues fixed: - CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr bsc1261188. - CVE-2026-2340: WORM vfs module does not block directory...

9.8CVSS8.3AI score0.1393EPSS
SaveExploits9References27
OSV
OSV
added 2026/08/06 9:27 a.m.9 views

SUSE-SU-2026:23129-1 Security update for samba

This update for samba fixes the following issues: Update to 4.22.11. Security issues fixed: - CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr bsc1261188. - CVE-2026-2340: WORM vfs module does not block directory...

9.8CVSS8.2AI score0.1393EPSS
SaveExploits9References28
Rows per page
Query Builder