Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

Export CSV
CVE-2019-16168

sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."

CVSS 3.1 · 6.5 Medium EPSS 4.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 6 more
Products
Ubuntu Linux Debian Linux Fedora and 18 more
CVE-2019-13057

openldap: Information disclosure issue in slapd component

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)

CVSS 3.1 · 4.9 Medium EPSS 6.6% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Mac Os X Ubuntu Linux Debian Linux and 6 more
CVE-2016-4472

expat: Undefined behavior and pointer overflows

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.

CVSS 3.1 · 8.1 High EPSS 11.9% KEV · Not listed
Vendors
Canonical Libexpat Project Mcafee and 1 more
Products
Ubuntu Linux Libexpat Policy Auditor and 1 more
CVE-2016-0718

expat: Out-of-bounds heap read on crafted input causing crash

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 13.3% KEV · Not listed
Vendors
Apple Canonical Debian and 7 more
Products
Mac Os X Ubuntu Linux Debian Linux and 13 more
CVE-2017-9287

openldap: Double free vulnerability in servers/slapd/back-mdb/search.c

servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0.

CVSS 3.1 · 6.5 Medium EPSS 7.1% KEV · Not listed
Vendors
Debian Mcafee Openldap and 2 more
Products
Debian Linux Policy Auditor Openldap and 8 more
CVE-2017-17740

openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service

contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.

CVSS 3.1 · 7.5 High EPSS 7.0% KEV · Not listed
Vendors
Mcafee Openldap Opensuse and 1 more
Products
Policy Auditor Openldap Leap and 1 more
CVE-2021-31852

Cross-Site Scripting vulnerability in Policy Auditor

A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the UID request parameter. The malicious script is reflected unmodified into the Policy Auditor web-based interface which could lead to the extract of end user session token or login credentials. These may be used to access additional security-critical applications or conduct arbitrary cross-domain requests.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Policy Auditor
CVE-2021-31851

Cross-Site Scripting vulnerability in Policy Auditor

A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the profileNodeID request parameters. The malicious script is reflected unmodified into the Policy Auditor web-based interface which could lead to the extraction of end user session token or login credentials. These may be used to access additional security-critical applications or conduct arbitrary cross-domain requests.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Mcafee
Products
Policy Auditor
CVE-2020-15719

openldap: Certificate validation incorrectly matches name against CN-ID

libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.

CVSS 3.1 · 4.2 Medium EPSS 2.5% KEV · Not listed
Vendors
Mcafee Openldap Opensuse and 2 more
Products
Policy Auditor Openldap Leap and 2 more