Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters.EPSS 0.2%Oct 14, 2026
- High7.5Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module).EPSS 0.4%Oct 14, 2026
- Medium6.3Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize user-supplied parameters before using…EPSS 0.3%Oct 12, 2026
- Critical9.2LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization HeaderEPSS 0.5%Oct 12, 2026
- Medium5.3Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability (CWE-90) that allows unauthenticated attackers to exfiltrate directory data or bypass a…May 25, 2026
- Critical9.8An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an attacker to retrieve arbitrary certificates from the repository.May 22, 2026
- Medium4.2An LDAP injection vulnerability in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to manipulate LDAP queries and obtain limited information or mod…May 21, 2026
- Critical9.1Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- High7.5ZITADEL is an open source identity management platform.May 14, 2026
- High8.1Lemur manages TLS certificate creation.May 12, 2026
- Medium6.5Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.Apr 22, 2026
- Medium4.8mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy.Apr 21, 2026
- High8.7PAC4J is vulnerable to LDAP Injection in multiple methods.Apr 17, 2026
- High8.2maddy is a composable, all-in-one mail server.Apr 16, 2026
- Medium5.5Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc.EPSS 0.5%Apr 15, 2026
- High8.8MISP is an open source threat intelligence and sharing platform.Apr 9, 2026
- High8.2OPNsense is a FreeBSD based firewall and routing platform.Apr 9, 2026
- Medium6.3SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim another user's PGP signature as their own.Apr 2, 2026
- Medium4.9SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read the contents of emails encrypted for other users.Apr 2, 2026
- Medium5.3If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication.Mar 27, 2026
- Medium6.3n8n is an open source workflow automation platform.Mar 25, 2026
- Critical9.8SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Mar 20, 2026
- Medium6.0Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 10, 2026
23 records · page 1 of 1
PreviousNext