Lucene search
+L

28 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/03 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-103885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/02 10:17 a.m.•10 views

CVE-2026-103885

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

7.5CVSS0.00488EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/10/02 10:17 a.m.•11 views

CVE-2026-103885

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/02 10:09 a.m.•50 views

CVE-2026-103885 Apache Directory LDAP API: Denial of service via crafted telephone number values

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

0.00488EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/02 10:09 a.m.•4 views

CVE-2026-103885 Apache Directory LDAP API: Denial of service via crafted telephone number values

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

5.8AI score0.00488EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/02 10:09 a.m.•13 views

EUVD-2026-91362

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

5.8AI score0.00488EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/02 10:09 a.m.•13 views

CVE-2026-103885

An Asymmetric Resource Consumption vulnerability exists in the Apache Directory LDAP API (versions 2.1.0 through 2.1.8). An attacker can trigger a Denial of Service (DoS) by submitting specially crafted Telephone Numbers , causing the LDAP server (such as Apache DS ) to consume 100% of a CPU core...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/02 12:00 a.m.•7 views

CVE-2026-103885: Undefined Security Weakness

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

5.8AI score0.00488EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•9 views

PT-2026-104188

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API like Apache DS may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. User...

5.8AI score0.00488EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 11:25 a.m.•15 views

CVE-2013-5164

Multiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate attackers to bypass the locked state, and dial the telephone numbers in arbitrary Contacts entries, by visiting the Contacts pane...

3.3CVSS6.4AI score0.00228EPSS
SaveExploits0References1
OSV
OSV
•added 2021/05/21 6:15 p.m.•15 views

CVE-2020-23768

An information disclosure vulnerability was discovered in alipayfunction.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1. If exploited, this vulnerability will allow attackers to obtain users' personally identifiable information including e-mail address and...

7.5CVSS7.1AI score0.01025EPSS
SaveExploits1References1
NVD
NVD
•added 2021/05/21 6:15 p.m.•34 views

CVE-2020-23768

An information disclosure vulnerability was discovered in alipayfunction.php in the log file of Alibaba payment interface on PHPPYUN prior to version 5.0.1. If exploited, this vulnerability will allow attackers to obtain users' personally identifiable information including e-mail address and...

7.5CVSS0.01025EPSS
SaveExploits1References1
zdt
zdt
•added 2020/12/02 12:00 a.m.•118 views

Mitel mitel-cs018 - Call Data Information Disclosure Vulnerability

Exploit Title: Mitel mitel-cs018 - Call Data Information Disclosure Exploit Author: Andrea Intilangelo acme olografix / paranoici Vendor Homepage: www.mitel.com Version: mitel-cs018 Tested on: Windows, Linux There is an interesting bug in a Mitel's servers for Voice over IP that allows to discove...

8.8CVSS8.9AI score0.05794EPSS
SaveExploits3
Exploit DB
Exploit DB
•added 2020/12/02 12:00 a.m.•432 views

Mitel mitel-cs018 - Call Data Information Disclosure

Exploit Title: Mitel mitel-cs018 - Call Data Information Disclosure Date: 2003-07-28 Exploit Author: Andrea Intilangelo acme olografix / paranoici Vendor Homepage: www.mitel.com Version: mitel-cs018 Tested on: Windows, Linux There is an interesting bug in a Mitel's servers for Voice over IP that...

5.6CVSS5.2AI score0.01604EPSS
SaveExploits1
ThreatPost
ThreatPost
•added 2015/03/30 12:57 p.m.•10 views

Hackers Selling Uber Credentials on Underground Market

The alternative taxi service Uber denies insinuations that its systems were breached following reports claiming that underground forums are offering Uber user-credentials for as little as $1. First reported by Vice Magazine’s Motherboard spinoff, the information for sale also includes names, the...

0.2AI score
SaveExploits0References2
Prion
Prion
•added 2014/09/22 1:55 a.m.•22 views

Design/Logic Flaw

Microsoft Asha OS on the Microsoft Mobile Nokia Asha 501 phone 14.0.4 allows physically proximate attackers to bypass the lock-screen protection mechanism, and read or modify contact information or dial arbitrary telephone numbers, by tapping the SOS Option and then tapping the Green Call Option...

6.6CVSS7AI score0.02187EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2013/10/24 12:00 a.m.•6 views

PT-2013-5409

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.0.3 Description The issue allows physically proximate attackers to bypass the locked state of the device and dial telephone numbers from arbitrary Contacts entries by visiting the Contacts pane in the Phone app...

3.3CVSS0.00228EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2013/06/23 3:24 p.m.•20 views

Facebook hack exposes contact Information of 6 Million Users

Facebook is alerting its users about a security breach due to a technical glitch, that may have inadvertently exposed the email addresses and telephone numbers of roughly 6 million users. "We recently received a report to our White Hat program regarding a bug that may have allowed some of a...

6.7AI score
SaveExploits0
Prion
Prion
•added 2012/08/21 10:46 a.m.•26 views

Design/Logic Flaw

The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...

7.1CVSS6.6AI score0.01759EPSS
SaveExploits0References3
The Hacker News
The Hacker News
•added 2012/03/22 7:27 p.m.•40 views

US Army's CECOM Data leaked by Hacker

US Army's CECOM Data leaked by Hacker Hacker Black Jester recently published contract information from a Web site connected to the U.S. Army Communications and Electronics Command CECOM. "30 record sets that include names, user IDs, physical addresses, email addresses, telephone numbers, and...

6.5AI score
SaveExploits0
Rows per page
Query Builder