All CVEs — page 348 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows SQL injection, enabling an attacker to execute arbitrary SQL commands, potentially leading to data theft or corruption.
This vulnerability allows attackers to cause indefinite CPU consumption on LDAP servers using the Apache Directory LDAP API by sending malformed telephone numbers, potentially leading to denial of service. The flaw affects versions before 2.1.9 and can be exploited remotely without authentication.
This vulnerability allows attackers to cause excessive CPU consumption by submitting bcrypt passwords with high cost factors (like 30) to an LDAP server, potentially leading to a denial of service. The flaw occurs because the server doesn't enforce bounded computational costs during password verification.
The vulnerability allows attackers to intercept sensitive LDAP data transmitted in cleartext before TLS encryption is fully established. This occurs when a StartTLS operation begins after a Search request, leaving data exposed during the transition period.
The flaw is a deserialization vulnerability in the Apache Directory LDAP API, allowing attackers to execute arbitrary code via a specially crafted schema object. This matters because it can lead to remote code execution (RCE) on the affected system.
A memory allocation vulnerability in Apache Directory LDAP API allows attackers to trigger excessive heap allocations through malformed BER-encoded responses, leading to denial of service via OutOfMemoryError. This affects versions 1.2.0 through 1.2.8 and can be exploited by unauthenticated peers or MITM attackers.