https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:56:11.720954+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-16093 bdu:2025-16093 2026-10-03T14:56:11.801294+00:00 bdu:2025-16093 https://cve.radiocsirt.org/vuln/euvd-2026-207536 EUVD-2026-207536 2026-10-03T14:56:11.801343+00:00 EUVD-2026-207536 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9101 fkie_cve-2024-9101 2026-10-03T14:56:11.801365+00:00

A reflected cross-site scripting (XSS) vulnerability in the 'Entry Chooser' of phpLDAPadmin (version 1.2.1 through the latest version, 1.2.6.7) allows attackers to execute arbitrary JavaScript in the user's browser via the 'element' parameter, which is unsafely passed to the JavaScript 'eval' function. However, exploitation is limited to specific conditions where 'opener' is correctly set.

 https://cve.radiocsirt.org/vuln/ghsa-6mpf-h5jc-fvrw GHSA-6mpf-h5jc-fvrw 2026-10-03T14:56:11.801412+00:00

A reflected cross-site scripting (XSS) vulnerability in the 'Entry Chooser' of phpLDAPadmin (version 1.2.1 through the latest version, 1.2.6.7) allows attackers to execute arbitrary JavaScript in the user's browser via the 'element' parameter, which is unsafely passed to the JavaScript 'eval' function. However, exploitation is limited to specific conditions where 'opener' is correctly set.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-9101 UBUNTU-CVE-2024-9101 2026-10-03T14:56:11.801452+00:00

Affected: Ubuntu:16.04:LTS: phpldapadmin, Ubuntu:18.04:LTS: phpldapadmin, Ubuntu:20.04:LTS: phpldapadmin, Ubuntu:22.04:LTS: phpldapadmin, Ubuntu:24.04:LTS: phpldapadmin, Ubuntu:25.10: phpldapadmin, Ubuntu:26.04:LTS: phpldapadmin

A reflected cross-site scripting (XSS) vulnerability in the 'Entry Chooser' of phpLDAPadmin (version 1.2.1 through the latest version, 1.2.6.7) allows attackers to execute arbitrary JavaScript in the user's browser via the 'element' parameter, which is unsafely passed to the JavaScript 'eval' function. However, exploitation is limited to specific conditions where 'opener' is correctly set.