Remote code execution

Apache Flume versions 1.4.0 through 1.9.0 are vulnerable to a remote code execution RCE attack when a configuration uses a JMS Source with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI to allow only the use of the java...

CVE-2022-25167 Apache Flume vulnerable to a JNDI RCE in JMSSource

Apache Flume versions 1.4.0 through 1.9.0 are vulnerable to a remote code execution RCE attack when a configuration uses a JMS Source with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI to allow only the use of the java...

CVE-2022-25167

Apache Flume (versions 1.4.0–1.9.0) is vulnerable to remote code execution when a JMS Source is configured with a JNDI LDAP data source URI and an attacker controls the target LDAP server. The underlying issue is the JNDI usage, which can be exploited to run arbitrary code on the target. Remediat...

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

...

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

...

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

...

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

...

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

...

Microsoft Lightweight Directory Access Protocol 安全漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft that runs on a layer above the TCP/IP stack. A security vulnerability exists in Microsoft Lightweight Directory Access Protocol. The following products and versions are affected:Windows 10 Version...

KLA12568 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, gain privileges, execute arbitrary code, bypass security restrictions. Below is a complete list of...

KB5014743: Windows Server 2008 Security Update (June 2022)

The remote Windows host is missing security update 5014743. It is, therefore, affected by multiple vulnerabilities - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-3016...

KB5014692: Windows 10 version 1809 / Windows Server 2019 Security Update (June 2022)

The remote Windows host is missing security update 5014692. It is, therefore, affected by multiple vulnerabilities - Windows Network File System Remote Code Execution Vulnerability CVE-2022-30136 - Windows Kerberos Elevation of Privilege Vulnerability CVE-2022-30165 - Windows Lightweight Director...

KB5014702: Windows 10 Version 1607 and Windows Server 2016 Security Update (June 2022)

The remote Windows host is missing security update 5014702. It is, therefore, affected by multiple vulnerabilities - Windows Network File System Remote Code Execution Vulnerability CVE-2022-30136 - Windows Kerberos Elevation of Privilege Vulnerability CVE-2022-30165 - Windows Lightweight Director...

KB5014746: Windows 8.1 and Windows Server 2012 R2 Security Update (June 2022)

The remote Windows host is missing security update 5014746. It is, therefore, affected by multiple vulnerabilities - Windows Network File System Remote Code Execution Vulnerability CVE-2022-30136 - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

KB5014697: Windows 11 Security Update (June 2022)

The remote Windows host is missing security update 5014697. It is, therefore, affected by multiple vulnerabilities - Windows Kerberos Elevation of Privilege Vulnerability CVE-2022-30165 - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability CVE-2022-30139,...

KB5014742: Windows 7 and Windows Server 2008 R2 Security Update (June 2022)

The remote Windows host is missing security update 5014742. It is, therefore, affected by multiple vulnerabilities - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-3016...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights...

KB5014710: Windows 10 LTS 1507 Security Update (June 2022)

The remote Windows host is missing security update 5014710. It is, therefore, affected by multiple vulnerabilities - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability CVE-2022-30139, CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-3015...

SQL Injection

openldap is vulnerable to SQL injection. The vulnerability exists due to a lack of sanitization within an LDAP query allowing an attacker to inject malicious query into the system...

CVE-2022-25807

An issue was discovered in the IGEL Universal Management Suite UMS 6.07.100. A hardcoded DES key in the LDAPDesPWEncrypter class allows an attacker, who has discovered encrypted LDAP bind credentials, to decrypt those credentials using a static 8-byte DES key...