CVE-2026-11789

A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a buffer over-read that crashes the LDAP server during authentication. Mitigation Disable...

PT-2023-23944 · Buddyboss · Buddyboss

Name of the Vulnerable Software and Affected Versions: BuddyBoss version 2.2.9 Description: The issue allows an authenticated user to access and rename other users' albums by exploiting an authorization bypass vulnerability. This can be done by changing the album identification id. Recommendation...