https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:31:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-03203 bdu:2022-03203 https://cve.radiocsirt.org/vuln/bdu:2022-03203 https://cve.radiocsirt.org/vuln/bell-cve-2022-29155 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2022-29155 https://cve.radiocsirt.org/vuln/bit-openldap-2022-29155 <p><strong>Affected:</strong> Bitnami: openldap</p> <p>In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.</p> <p><strong>Affected:</strong> Bitnami: openldap</p> <p>In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.</p> https://cve.radiocsirt.org/vuln/bit-openldap-2022-29155 https://cve.radiocsirt.org/vuln/certfr-2022-avi-463 certfr-2022-avi-463 https://cve.radiocsirt.org/vuln/certfr-2022-avi-463 https://cve.radiocsirt.org/vuln/cleanstart-2026-ym99872 <p><strong>Affected:</strong> CleanStart: openldap</p> <p>Security vulnerability affects the openldap package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: openldap</p> <p>Security vulnerability affects the openldap package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ym99872 https://cve.radiocsirt.org/vuln/euvd-2026-16017 EUVD-2026-16017 https://cve.radiocsirt.org/vuln/euvd-2026-16017 https://cve.radiocsirt.org/vuln/fkie_cve-2022-29155 <p>In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.</p> <p>In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-29155 https://cve.radiocsirt.org/vuln/ghsa-9rm2-9q89-9524 <p>In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.</p> <p>In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.</p> https://cve.radiocsirt.org/vuln/ghsa-9rm2-9q89-9524 https://cve.radiocsirt.org/vuln/gsd-2022-29155 gsd-2022-29155 https://cve.radiocsirt.org/vuln/gsd-2022-29155 https://cve.radiocsirt.org/vuln/icsa-23-348-10 <p>expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE. shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start o…</p> <p>expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE. shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start o…</p> https://cve.radiocsirt.org/vuln/icsa-23-348-10 https://cve.radiocsirt.org/vuln/msrc_cve-2022-29155 msrc_CVE-2022-29155 https://cve.radiocsirt.org/vuln/msrc_cve-2022-29155 https://cve.radiocsirt.org/vuln/oesa-2022-1654 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: openldap, openEuler:20.03-LTS-SP3: openldap, openEuler:22.03-LTS: openldap</p> <p>OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP. Security Fix(es): In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.(CVE-2022-29155)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: openldap, openEuler:20.03-LTS-SP3: openldap, openEuler:22.03-LTS: openldap</p> <p>OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP. Security Fix(es): In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.(CVE-2022-29155)</p> https://cve.radiocsirt.org/vuln/oesa-2022-1654 https://cve.radiocsirt.org/vuln/suse-su-2022:1671-1 <p>Security update for openldap2</p> <p>Security update for openldap2</p> https://cve.radiocsirt.org/vuln/suse-su-2022:1671-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-29155 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: openldap, Ubuntu:Pro:16.04:LTS: openldap, Ubuntu:18.04:LTS: openldap, Ubuntu:20.04:LTS: openldap, Ubuntu:22.04:LTS: openldap</p> <p>In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: openldap, Ubuntu:Pro:16.04:LTS: openldap, Ubuntu:18.04:LTS: openldap, Ubuntu:20.04:LTS: openldap, Ubuntu:22.04:LTS: openldap</p> <p>In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-29155 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0455 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenLDAP ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenLDAP ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0455