Lucene search
+L

11073 matches found

RedHat Linux
RedHat Linux
added yesterday5 views

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

7.5CVSS5.9AI score0.00778EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added yesterday4 views

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

7.5CVSS5.9AI score0.00778EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added yesterday5 views

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS5.9AI score0.00778EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added yesterday10 views

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

7.5CVSS5.4AI score0.00545EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday9 views

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

7.5CVSS5.4AI score0.0045EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added yesterday10 views

PT-2026-76648

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation...

5.4CVSS5.2AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added yesterday4 views

RHEL 10 : 389-ds-base (RHSA-2026:55425)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55425 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDA...

7.5CVSS6AI score0.00778EPSS
SaveExploits0References8
Oracle linux
Oracle linux
added yesterday9 views

389-ds:1.4 security update

1.4.3.39-26 - Bump version to 1.4.3.39-26 - Resolves: RHEL-183073 - EMBARGOED CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check rhel-8.10.z - Resolves: RHEL-190782 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref contro...

7.5CVSS6.2AI score0.00778EPSS
SaveExploits0
AlmaLinux
AlmaLinux
added yesterday4 views

Important: 389-ds:1.4 security update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status...

7.5CVSS5.7AI score0.00778EPSS
SaveExploits0References8
AlmaLinux
AlmaLinux
added yesterday1 views

Important: 389-ds-base security update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status...

7.5CVSS0.00778EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added yesterday7 views

RHEL 9 : 389-ds-base (RHSA-2026:55422)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55422 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

7.5CVSS6AI score0.00778EPSS
SaveExploits0References8
Oracle linux
Oracle linux
added yesterday7 views

389-ds-base security update

3.2.0-9 - Bump version to 3.2.0-9 - Resolves: RHEL-183075 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check rhel-10.2.z - Resolves: RHEL-190776 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parse...

7.5CVSS5.7AI score0.00778EPSS
SaveExploits0
OSV
OSV
added yesterday2 views

ALSA-2026:55530 Important: 389-ds:1.4 security update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status...

7.5CVSS5.7AI score0.00778EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added yesterday7 views

RHEL 9 : 389-ds-base (RHSA-2026:55421)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55421 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

7.5CVSS6AI score0.00778EPSS
SaveExploits0References8
Oracle linux
Oracle linux
added yesterday8 views

389-ds-base security update

2.8.0-9 - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check rhel-9.8.z - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser rhel-9.8.z - Resolves:...

7.5CVSS5.6AI score0.00778EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added yesterday5 views

RHEL 9 : 389-ds-base (RHSA-2026:55426)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55426 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

7.5CVSS6AI score0.00778EPSS
SaveExploits0References8
Nuclei
Nuclei
added 2 days ago77 views

LDAP Injection In OpenAM

OpenAM contains an LDAP injection vulnerability. When a user tries to reset his password, they are asked to enter username, and then the backend validates whether the user exists or not through an LDAP query. If the user exists, the password reset token is sent to the user's email. Enumeration ca...

7.5CVSS7.3AI score0.76385EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2 days ago51 views

Alerta < 8.1.0 - Authentication Bypass

Alerta prior to version 8.1.0 is prone to authentication bypass when using LDAP as an authorization provider and the LDAP server accepts Unauthenticated Bind requests. id: CVE-2020-26214 info: name: Alerta 8.1.0 - Authentication Bypass author: CasperGN,daffainfo severity: critical description:...

9.8CVSS8.6AI score0.65933EPSS
SaveExploits0References5
NVD
NVD
added 2 days ago4 views

CVE-2026-19930

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...

6.5CVSS0.00242EPSS
SaveExploits0References8
EUVD
EUVD
added 2 days ago4 views

EUVD-2026-59846

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...

6.5CVSS6.3AI score0.00242EPSS
SaveExploits0References8
Rows per page
Query Builder