CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9 matches found

Snyk•added 2026/03/24 9:51 p.m.•2 views

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation through the RDNsMatch LDAP DN matching function in the internal/ldap component. An attacker can impersonate a trusted client and gain unauthorized access by presenting a certificate with a different set o...

4.8CVSS5.7AI score0.00009EPSS

Exploits0References2

OSV•added 2020/10/30 12:0 a.m.•0 views

UBUNTU-CVE-2020-25692

A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service...

7.5CVSS7.1AI score0.04749EPSS

Exploits0References4

Symantec•added 2016/07/14 8:0 a.m.•43 views

SA130 : Security Control Bypass Vulnerability in ProxySG, ASG, and CacheFlow

SUMMARY Some HTTP and HTTPS requests may trigger reverse DNS RDNS lookups in ProxySG, ASG, and CacheFlow. When these products are configured with policy rules that use hostnames from RDNS lookup results, such requests may bypass security controls such as blocking a request, requiring user...

5CVSS7.7AI score0.00734EPSS

Exploits0Affected Software3

Tenable Nessus•added 2011/07/14 12:0 a.m.•515 views

Host Fully Qualified Domain Name (FQDN) Resolution (XML tag)

Nessus was able to resolve the fully qualified domain name FQDN of the remote host. This plugin, which does not show up in the report, writes the IP and FQDN of this host as an XML tag in the .nessus v2 reports. TRUSTED...

5.5AI score

Exploits0

CVE•added 2009/08/04 4:13 p.m.•59 views

CVE-2009-2661

The CVE-2009-2661 issue affects the OpenSwan/strongSwan pluto daemon (X.509 handling of RDNs). A crafted ASN.1 data input could crash pluto, causing a denial of service. The root cause is tied to an ASN.1 parsing length/structure handling for RDNs, with references indicating an incomplete prior f...

5CVSS5.5AI score0.01793EPSS

Exploits0References10Affected Software1

UbuntuCve•added 2009/06/25 2:0 a.m.•14 views

CVE-2009-2185

The ASN.1 parser pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1parser.c in a strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and b openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service pluto IKE daemon crash...

5CVSS5.9AI score0.08229EPSS

Exploits0References1