PA
Product
Policy Auditor
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 6Low 0
Watch
Add Policy Auditor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-0718 | 9.8 | May 26 | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow Affected: before 6.5.1 |
| CVE-2016-4472 | 8.1 | Jun 30 | The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute… Affected: before 6.5.1 |
| CVE-2017-17740 | 7.5 | Dec 18 | contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the… Affected: before 6.5.1 |
| CVE-2019-16168 | 6.5 | Sep 9 | In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe… Affected: before 6.5.1 |
| CVE-2017-9287 | 6.5 | May 29 | servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability Affected: before 6.5.1 |
| CVE-2021-31852 | 6.1 | Nov 23 | A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the UID… Affected: before 6.5.2 |
| CVE-2021-31851 | 6.1 | Nov 23 | A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the… Affected: before 6.5.2 |
| CVE-2019-13057 | 4.9 | Jul 26 | An issue was discovered in the server in OpenLDAP before 2.4.48 Affected: before 6.5.1; 6.5.1 |
| CVE-2020-15719 | 4.2 | Jul 14 | libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support Affected: before 6.5.1 |
Showing 9