Where
-Infinity
0

Trending

Last week
Last month
Last year

redhat Enterprise Linux389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification

Risk 20
Severity
3.7
First published (updated )
CVE-2026-15041

Red Hat 389 Directory ServerThe ldap_utf8prev() function in 389 Directory Server unconditionally reads up to 6 bytes before a he…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2485425

Red Hat 389 Directory ServerThe SMD5 password storage plugin in 389 Directory Server computes salt length by subtracting MD5_LEN…

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2485422

Red Hat 389 Directory ServerBuffer Overflow

Risk 5
Severity
1
First published (updated )
REDHAT-BUG-2484915

Red Hat 389 Directory ServerBuffer Overflow

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2484913
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Red Hat 389 Directory ServerBuffer Overflow

Risk 19
Severity
4
First published (updated )
REDHAT-BUG-2423624

redhat/389-ds-baseModerate: redhat-ds:11 security and bug fix update

Risk 19
Severity
4
First published (updated )
Advisory
RHSA-2024:6568

redhat/389-ds-baseModerate: redhat-ds:11 security and bug fix update

Risk 19
Severity
4
First published (updated )
Advisory
RHSA-2024:6576

redhat/389-ds-baseImportant: redhat-ds:11 security and bug fix update

Risk 33
Severity
7
First published (updated )
Advisory
RHSA-2024:4209

redhat/389-ds-baseImportant: redhat-ds:11 security update

Risk 33
Severity
7
First published (updated )
Advisory
RHSA-2024:4210
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat/389-ds-baseModerate: redhat-ds:11 security, bug fix, and enhancement update

Risk 19
Severity
4
First published (updated )
Advisory
RHSA-2024:1372

redhat/389-ds-baseModerate: redhat-ds:11 security, bug fix, and enhancement update

Risk 19
Severity
4
First published (updated )
Advisory
RHSA-2023:4655

redhat Enterprise LinuxNull Pointer Dereference

Risk 38
Severity
6.5
First published (updated )
CVE-2022-2850

Fedoraproject Fedoramishandling of the filter that would yield incorrect results, but as that has progressed, we have de…

Risk 43
Severity
7.5
First published (updated )
CVE-2022-1949

Fedoraproject FedoraA vulnerability was found in the 389 Directory Server that allows expired passwords to access the da…

Risk 38
Severity
6.5
First published (updated )
CVE-2022-0996
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Port389 389-ds-baseA vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker w…

Risk 43
Severity
7.5
First published (updated )
CVE-2022-0918

redhat/389-ds-baseDouble Free

Risk 45
Severity
7.5
First published (updated )
CVE-2021-4091

redhat/389-ds-baseA flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally …

Risk 40
Severity
6.5
First published (updated )
CVE-2021-3652

redhat/389-ds-baseInfoleak

Risk 27
Severity
5.3
First published (updated )
CVE-2020-35518

Fedoraproject 389 Directory ServerA flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to …

Risk 38
Severity
6.5
First published (updated )
CVE-2019-14824
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Fedoraproject 389 Directory ServerIt was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was i…

Risk 44
Severity
7.8
First published (updated )
CVE-2019-10171

redhat/389-ds-baseIn 389-ds-base, requests are handled by workers threads. Each sockets will be waited by the worker f…

Risk 43
Severity
7.5
First published (updated )
CVE-2019-3883

redhat/389-ds-baseInfoleak

Risk 27
Severity
4.6
First published (updated )
CVE-2019-10224

redhat/389-ds-baseA flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive C…

Risk 44
Severity
7.8
First published (updated )
CVE-2018-14648

redhat Enterprise Linux Server EusDouble Free

Risk 43
Severity
7.5
First published (updated )
CVE-2018-14638
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Fedoraproject 389 Directory ServerInput Validation

Risk 43
Severity
7.5
First published (updated )
CVE-2018-14624

redhat/389-ds-baseInput Validation

Risk 38
Severity
6.5
First published (updated )
CVE-2018-10935

redhat/389-ds-baseBy default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores password …

Risk 66
Severity
7.2
First published (updated )
CVE-2018-10871

redhat/389-ds-baseRace Condition

Risk 39
Severity
7.1
First published (updated )
CVE-2018-10850

Fedoraproject 389 Directory Server389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the uniquen…

Risk 43
Severity
7.5
First published (updated )
CVE-2017-2591
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203