Vulnerabilities
Summary — last 7 days
New vulnerabilities3,193▲ 188 vs. last week
Critical / high1,511▼ 47 vs. last week
New active exploitation (KEV)5→ no change vs. last week
Unscored (no CVSS)100▼ 70 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 1.7% | — | Slapi-nis Project Slapi-nisFedoraproject Fedora | 5/20/2021 | 6/17/2026 | A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability. | |
| Modified | High (7.8) | 3.1% | — | Redhat Slapi-nis | 3/30/2015 | 6/17/2026 | The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups. |