Lucene search
+L

11073 matches found

RedHat Linux
RedHat Linux
added yesterday4 views

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

7.5CVSS5.9AI score0.00778EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added yesterday5 views

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

7.5CVSS5.4AI score0.00545EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday4 views

Important: Red Hat Security Advisory: 389-ds:1.4 security update

An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Comm...

7.5CVSS5.9AI score0.00778EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added yesterday4 views

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

7.5CVSS5.4AI score0.00545EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday4 views

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.9AI score0.00778EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added yesterday4 views

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

7.5CVSS5.4AI score0.0045EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added yesterday4 views

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.9AI score0.00778EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added yesterday4 views

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

7.5CVSS5.4AI score0.0045EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added yesterday4 views

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

7.5CVSS5.4AI score0.00545EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday4 views

Important: Red Hat Security Advisory: 389-ds:1.4 security update

An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Comm...

7.5CVSS5.9AI score0.00778EPSS
SaveExploits0References4
NVD
NVD
added yesterday6 views

CVE-2026-75007

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation...

5.4CVSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday3 views

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.9AI score0.00778EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added yesterday4 views

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

7.5CVSS5.4AI score0.0045EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added yesterday5 views

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

7.5CVSS5.4AI score0.00545EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday5 views

Important: Red Hat Security Advisory: 389-ds:1.4 security update

An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS5.9AI score0.00778EPSS
SaveExploits0References4
Cvelist
Cvelist
added yesterday30 views

CVE-2026-75007

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation...

5.4CVSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-75007

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation...

5.4CVSS5.2AI score
SaveExploits0References6Affected Software1
CVE
CVE
added yesterday15 views

CVE-2026-75007

Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3 is vulnerable to LDAP search filter injection through unescaped %u/%fu/%d substitution, enabling information disclosure or privilege escalation (CVSS 5.4, MEDIUM). Fixes are available in 1.6.18 and 1.7.3 releases. No in-the-wild exploitation ...

5.4CVSS5.3AI score
SaveExploits0References5
EUVD
EUVD
added yesterday6 views

EUVD-2026-60172

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation...

5.4CVSS5.3AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added yesterday5 views

CVE-2026-75007

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation...

5.4CVSS5.2AI score
SaveExploits0References5
Rows per page
Query Builder