https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:39:37.426939+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04434 bdu:2022-04434 2026-10-03T01:39:37.596496+00:00 bdu:2022-04434 https://cve.radiocsirt.org/vuln/euvd-2026-12073 EUVD-2026-12073 2026-10-03T01:39:37.596536+00:00 EUVD-2026-12073 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1949 fkie_cve-2022-1949 2026-10-03T01:39:37.596559+00:00

An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.

 https://cve.radiocsirt.org/vuln/ghsa-x847-vxvj-g6rj GHSA-x847-vxvj-g6rj 2026-10-03T01:39:37.596593+00:00

An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.

 https://cve.radiocsirt.org/vuln/gsd-2022-1949 gsd-2022-1949 2026-10-03T01:39:37.596611+00:00 gsd-2022-1949 https://cve.radiocsirt.org/vuln/oesa-2024-2164 OESA-2024-2164 — three-eight-nine-ds-base security update 2026-10-03T01:39:37.596622+00:00

Affected: openEuler:20.03-LTS-SP4: three-eight-nine-ds-base

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fix(es): An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.(CVE-2022-1949) A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.(CVE-2024-5953)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1949 UBUNTU-CVE-2022-1949 2026-10-03T01:39:37.596649+00:00

Affected: Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base

An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.