https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T04:43:11.502614+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-27951 cnvd-2017-27951 2026-10-25T04:43:11.586531+00:00 cnvd-2017-27951 https://cve.radiocsirt.org/vuln/euvd-2026-185349 EUVD-2026-185349 2026-10-25T04:43:11.586593+00:00 EUVD-2026-185349 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12584 fkie_cve-2017-12584 2026-10-25T04:43:11.586617+00:00

There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1. Also, an entire user profile (including the password) can be updated without sending the current password. This allows remote attackers to trick a user into changing to an attacker-controlled password, a complete account takeover, via the passwd1 and passwd2 fields in an admin/modules/system/app_user.php changecurrent=true operation.

 https://cve.radiocsirt.org/vuln/ghsa-jqh4-579p-g57f GHSA-jqh4-579p-g57f 2026-10-25T04:43:11.586660+00:00

There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1. Also, an entire user profile (including the password) can be updated without sending the current password. This allows remote attackers to trick a user into changing to an attacker-controlled password, a complete account takeover, via the passwd1 and passwd2 fields in an admin/modules/system/app_user.php changecurrent=true operation.

 https://cve.radiocsirt.org/vuln/gsd-2017-12584 gsd-2017-12584 2026-10-25T04:43:11.586688+00:00 gsd-2017-12584