İçeriğe atla
Noroxi

lemonldap-ng kayıtları

lemonldap-ng üreticisine ait 18 yayımlanmış kayıt.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2019-12046
    40Planlayın

    LemonLDAP::NG -2.0.3 has Incorrect Access Control.

    KritikCVSS 9,8İstismar yokEPSS %3

    lemonldap-ng · lemonldap\22 May 2019

  • CVE-2020-24660
    40Planlayın

    An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used.

    KritikCVSS 9,8İstismar yokEPSS %2

    lemonldap-ng · lemonldap\14 Eyl 2020

  • CVE-2019-15941
    40Planlayın

    OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect a

    KritikCVSS 9,8İstismar yokEPSS %2

    lemonldap-ng · lemonldap\25 Eyl 2019

  • CVE-2021-40874
    39İzleyin

    An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13.

    KritikCVSS 9,8İstismar yokEPSS %1

    lemonldap-ng · lemonldap\17 Tem 2022

  • CVE-2023-28862
    39İzleyin

    An issue was discovered in LemonLDAP::NG before 2.16.1.

    KritikCVSS 9,8İstismar yokEPSS %0

    lemonldap-ng · lemonldap\31 Mar 2023

  • CVE-2019-19791
    39İzleyin

    In LemonLDAP::NG (aka lemonldap-ng) before 2.0.7, the default Apache HTTP Server configuration does not properly restrict access to SOAP/RES

    KritikCVSS 9,8İstismar yokEPSS %0

    lemonldap-ng · lemonldap\29 May 2023

  • CVE-2021-35472
    36İzleyin

    An issue was discovered in LemonLDAP::NG before 2.0.12.

    YüksekCVSS 8,8İstismar yokEPSS %1

    lemonldap-ng · lemonldap\30 Tem 2021

  • CVE-2024-45160
    36İzleyin

    Incorrect credential validation in LemonLDAP::NG 2.18.x and 2.19.x before 2.19.2 allows attackers to bypass OAuth2 client authentication via

    KritikCVSS 9,1İstismar yokEPSS %0

    9 Eki 2024

  • CVE-2021-35473
    36İzleyin

    An issue was discovered in LemonLDAP::NG before 2.0.12.

    KritikCVSS 9,1İstismar yokEPSS %0

    10 Kas 2024

  • CVE-2024-52946
    35İzleyin

    An issue was discovered in LemonLDAP::NG before 2.20.1.

    YüksekCVSS 8,8İstismar yokEPSS %0

    18 Kas 2024

  • CVE-2019-13031
    33İzleyin

    LemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue when submitting a notification to the notification server.

    YüksekCVSS 8,1İstismar yokEPSS %2

    lemonldap-ng · lemonldap\28 Haz 2019

  • CVE-2020-36658
    32İzleyin

    In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, be

    YüksekCVSS 8,1İstismar yokEPSS %0

    lemonldap-ng · apache\27 Oca 2023

  • CVE-2020-36659
    32İzleyin

    In Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by default when connecting to remote LDAP back

    YüksekCVSS 8,1İstismar yokEPSS %0

    lemonldap-ng · apache\27 Oca 2023

  • CVE-2012-6426
    30İzleyin

    LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass

    YüksekCVSS 7,5İstismar yokEPSS %1

    lemonldap-ng · lemonldap\1 Oca 2013

  • CVE-2020-16093
    30İzleyin

    In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDA

    YüksekCVSS 7,5İstismar yokEPSS %0

    lemonldap-ng · lemonldap\17 Tem 2022

  • CVE-2024-48933
    24İzleyin

    A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers to inject arbitrary web script or HTML int

    OrtaCVSS 6,1İstismar yokEPSS %0

    lemonldap-ng · lemonldap\9 Eki 2024

  • CVE-2022-37186
    23İzleyin

    In LemonLDAP::NG before 2.0.15.

    OrtaCVSS 5,9İstismar yokEPSS %0

    lemonldap-ng · lemonldap\15 Nis 2023

  • CVE-2023-44469
    17İzleyin

    A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to sen

    OrtaCVSS 4,3İstismar yokEPSS %0

    lemonldap-ng · lemonldap\29 Eyl 2023