|
3061
|
6.5 |
MEDIUM
Network
|
redhat
|
directory_server
389_directory_server
enterprise_linux
|
A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, causing an out-of-bounds…
|
CWE-125
Out-of-bounds Read
|
CVE-2026-11786
|
2026-06-13 03:40 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3062
|
6.3 |
MEDIUM
Network
|
redhat
|
directory_server
389_directory_server
enterprise_linux
|
A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in string filter parsing that …
|
CWE-126
Buffer Over-read
|
CVE-2026-11787
|
2026-06-13 03:38 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3063
|
7.5 |
HIGH
Network
|
redhat
|
directory_server
389_directory_server
enterprise_linux
|
A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the L…
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-11788
|
2026-06-13 03:30 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3064
|
6.5 |
MEDIUM
Network
|
redhat
|
directory_server
389_directory_server
enterprise_linux
|
A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a…
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2026-11789
|
2026-06-13 03:30 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3065
|
4.9 |
MEDIUM
Network
|
redhat
|
directory_server
389_directory_server
enterprise_linux
|
A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on the iteration count extracted from stored password hashes. A privileged attacker…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2026-11790
|
2026-06-13 03:21 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3066
|
7.5 |
HIGH
Network
|
-
|
-
|
Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts.
These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
|
CWE-338
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
|
CVE-2026-9638
|
2026-06-13 03:16 |
2026-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3067
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily exploit…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2026-35273
|
2026-06-13 03:16 |
2026-06-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3068
|
3.3 |
LOW
Local
|
-
|
-
|
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to …
|
CWE-200
CWE-284
Information Exposure
Improper Access Control
|
CVE-2026-11459
|
2026-06-13 03:16 |
2026-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3069
|
8.8 |
HIGH
Network
|
siemens
|
sinec_ins
|
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The application does not properly sanitize user input in the /api/sftp/uploadFiles endpoint, allowing the injectio…
|
CWE-78
OS Command
|
CVE-2026-46746
|
2026-06-13 03:08 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3070
|
6.5 |
MEDIUM
Network
|
devolutions
|
devolutions_server
|
Improper neutralization of special elements in the built-in PAM provider password rotation templates in Devolutions Server allows an authenticated user with write access to a vault to execute arbitra…
|
CWE-78
OS Command
|
CVE-2026-10544
|
2026-06-13 03:07 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
