Export limit exceeded: 425826 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 16042 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 16,042

Export CSV
CVE-2020-36228

openldap: Integer underflow in issuerAndThisUpdateCheck in schema_init.c

An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.

CVSS 3.1 · 7.5 High EPSS 85.0% KEV · Not listed
Vendors
Apple Debian Openldap
Products
Macos Debian Linux Openldap
CVE-2020-36227

openldap: Infinite loop in slapd with the cancel_extop Cancel operation

A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.

CVSS 3.1 · 7.5 High EPSS 77.2% KEV · Not listed
Vendors
Apple Debian Openldap
Products
Macos Debian Linux Openldap
CVE-2020-36226

openldap: Denial of service via length miscalculation in slap_parse_user

A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.

CVSS 3.1 · 7.5 High EPSS 4.2% KEV · Not listed
Vendors
Apple Debian Openldap
Products
Mac Os X Macos Debian Linux and 1 more
CVE-2020-36225

openldap: Double free in the saslAuthzTo processing

A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.

CVSS 3.1 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Apple Debian Openldap
Products
Macos Debian Linux Openldap
CVE-2020-36224

openldap: Invalid pointer free in the saslAuthzTo processing

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.

CVSS 3.1 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Apple Debian Openldap
Products
Mac Os X Macos Debian Linux and 1 more
CVE-2020-36223

openldap: Out-of-bounds read in Values Return Filter

A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).

CVSS 3.1 · 7.5 High EPSS 4.2% KEV · Not listed
Vendors
Apple Debian Openldap
Products
Mac Os X Macos Debian Linux and 1 more
CVE-2020-36222

openldap: Assertion failure in slapd in the saslAuthzTo validation

A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.

CVSS 3.1 · 7.5 High EPSS 77.2% KEV · Not listed
Vendors
Apple Debian Openldap
Products
Mac Os X Macos Debian Linux and 1 more
CVE-2020-36221

openldap: Integer underflow in serialNumberAndIssuerCheck in schema_init.c

An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).

CVSS 3.1 · 7.5 High EPSS 85.0% KEV · Not listed
Vendors
Apple Debian Openldap
Products
Mac Os X Macos Debian Linux and 1 more
CVE-2020-25709

openldap: assertion failure in Certificate List syntax validation

A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Apple Debian Openldap and 1 more
Products
Mac Os X Macos Debian Linux and 3 more
CVE-2020-15358

sqlite: heap-based buffer overflow in multiSelectOrderBy due to mishandling of query-flattener optimization in select.c

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.

CVSS 3.1 · 5.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Apple Canonical Oracle and 3 more
Products
Icloud Ipados Iphone Os and 14 more
CVE-2020-13631

sqlite: Virtual table can be renamed into the name of one of its shadow tables

SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Broadcom Canonical and 6 more
Products
Icloud Ipados Iphone Os and 17 more
CVE-2020-13630

sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.

CVSS 3.1 · 7.0 High EPSS 1.0% KEV · Not listed
Vendors
Apple Broadcom Canonical and 7 more
Products
Icloud Ipados Iphone Os and 18 more
CVE-2020-13434

sqlite: integer overflow in sqlite3_str_vappendf function in printf.c

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Canonical Debian and 5 more
Products
Icloud Ipados Iphone Os and 13 more
CVE-2020-8286

curl: Inferior OCSP verification

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.

CVSS 3.1 · 7.5 High EPSS 4.6% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 6 more
Products
Mac Os X Macos Debian Linux and 19 more
CVE-2020-8285

curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

CVSS 3.1 · 7.5 High EPSS 9.8% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 7 more
Products
Mac Os X Macos Debian Linux and 29 more
CVE-2020-8284

curl: FTP PASV command response can cause curl to connect to arbitrary host

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.

CVSS 3.1 · 3.7 Low EPSS 3.9% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 7 more
Products
Mac Os X Macos Debian Linux and 28 more
CVE-2019-19906

cyrus-sasl: denial of service in _sasl_add_string function

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.

CVSS 3.1 · 7.5 High EPSS 8.0% KEV · Not listed
Vendors
Apache Apple Canonical and 5 more
Products
Bookkeeper Ipados Iphone Os and 17 more
CVE-2019-3855

libssh2: Integer overflow in transport read resulting in out of bounds write

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.

CVSS 3.1 · 8.8 High EPSS 9.3% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 5 more
Products
Xcode Debian Linux Fedora and 15 more
CVE-2019-13565

openldap: ACL restrictions bypass due to sasl_ssf value being set permanently

An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending on the ACL configuration, this can affect different types of operations (searches, modifications, etc.). In other words, a successful authorization step completed by one user affects the authorization requirement for a different user.

CVSS 3.1 · 7.5 High EPSS 5.0% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Mac Os X Ubuntu Linux Debian Linux and 6 more