https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:03:45.639511+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-17440 cnvd-2021-17440 2026-10-03T12:03:45.643787+00:00 cnvd-2021-17440 https://cve.radiocsirt.org/vuln/euvd-2026-181224 EUVD-2026-181224 2026-10-03T12:03:45.643829+00:00 EUVD-2026-181224 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14488 fkie_cve-2020-14488 2026-10-03T12:03:45.643850+00:00

OpenClinic GA 5.09.02 and 5.89.05b does not properly verify uploaded files, which may allow a low-privilege user to upload and execute arbitrary files on the system.

 https://cve.radiocsirt.org/vuln/ghsa-jq98-fhjv-vfh7 GHSA-jq98-fhjv-vfh7 2026-10-03T12:03:45.643889+00:00

OpenClinic GA 5.09.02 and 5.89.05b does not properly verify uploaded files, which may allow a low-privilege user to upload and execute arbitrary files on the system.

 https://cve.radiocsirt.org/vuln/gsd-2020-14488 gsd-2020-14488 2026-10-03T12:03:45.643915+00:00 gsd-2020-14488 https://cve.radiocsirt.org/vuln/icsma-20-184-01 ICSMA-20-184-01 — OpenClinic GA (Update B) 2026-10-03T12:03:45.643934+00:00

An attacker may bypass client-side access controls or use a crafted request to initiate a session with limited functionality, which may allow execution of admin functions such as SQL queries.CVE-2020-14485 has been assigned to this vulnerability. A CVSS v3 base score of 9.4 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L). An attacker can bypass the system 's account lockout protection, which may allow brute force password attacks.CVE-2020-14484 has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). An authentication mechanism within the system does not contain sufficient complexity to protect against brute force attacks, which may allow unauthorized users to access the system after no more than a fixed maximum number of attempts.CVE-2020-14494 has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). The system does not properly check permissions before executing SQL queries, which may allow a low-privilege user to access privileged information.CVE-2020-14491 has been assigned to this vulnerability. A CVSS v3 base score of 8.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L). A low-privilege user may use SQL syntax to write arbitrary files to the server, which may allow the execution of arbitrary commands.CVE-…