Open Source Vulnerabilities

zabbix

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER

samba

flaw was found in the way samba implemented SMB1 authentication

py3-django

issue was discovered in Django 5

samba

flaw was found in Samba

zabbix

In Zabbix from 4

py3-django

issue was discovered in Django 5

samba

flaw was found in the Samba AD LDAP server

py3-django

issue was discovered in Django 4

wolfssl

wolfSSL before 5

zabbix

zabbix-agent2 package before 5

samba

flaw was found in Samba

wolfssl

issue was discovered in wolfSSL before 5

samba

flaw was found in Samba

wolfssl

In wolfSSL before 5

rt4

Best Practical Request Tracker (RT) before 4

samba

MaxQueryDuration not honoured in Samba AD DC LDAP

wolfssl

In wolfSSL before 5

rt4

Best Practical Request Tracker (RT) before 4

samba

flaw was found in Samba

wolfssl

If a TLS 1

rt4

Best Practical Request Tracker (RT) before 4

samba

symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path

rt4

Best Practical Request Tracker (RT) 4

wolfssl

wolfSSL prior to 5

samba

heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal

wolfssl

wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing Bleichenbacher style attack, when built with the following options to configure: --enable-all C...

samba

PAC parsing in MIT Kerberos 5 (aka krb5) before 1

mercurial

flaw was found in Mercurial before 4

wolfssl

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa

salt

issue was discovered in SaltStack Salt before 2019

samba

Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it

wolfssl

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length

salt

issue was discovered in SaltStack Salt before 2019

samba

In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values

wolfssl

In function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and unchecked

salt

In SaltStack Salt through 2019

samba

flaw was found in Samba

samba

flaw was found in Samba

suricata

Suricata before 5

samba

vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements

suricata

issue was discovered in Suricata before 6

samba

design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers (RODCs)

suricata

Suricata before 5

samba

vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured with "acl_xattr:ignor...

suricata

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

samba

path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory

orc

Stack-based buffer overflow vulnerability exists in orcparse

suricata

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

samba

information leak vulnerability was discovered in Samba's LDAP server

suricata

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine