Skip to content
OpenAdvisories

Archive

29 December 2015

Vulnerabilities first published on this day (UTC), newest first.

9 results · Feed

  • Unscored —

    The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successfu…

  • Unscored —

    Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remot…

  • Unscored —

    The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x befor…

  • Unscored —

    The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x…

  • Unscored —
    CVE-2015-5252 EPSS 13%

    vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with cer…

  • Unscored —

    ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3…

  • Unscored —

    Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but…

  • Unscored —
    CVE-2015-5299 EPSS 14%

    The shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09…