https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T01:05:27.370038+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-23748 cnvd-2018-23748 2026-10-08T01:05:27.375148+00:00 cnvd-2018-23748 https://cve.radiocsirt.org/vuln/euvd-2026-183138 EUVD-2026-183138 2026-10-08T01:05:27.375180+00:00 EUVD-2026-183138 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12421 fkie_cve-2018-12421 2026-10-08T01:05:27.375195+00:00

LTB (aka LDAP Tool Box) Self Service Password before 1.3 allows a change to a user password (without knowing the old password) via a crafted POST request, because the ldap_bind return value is mishandled and the PHP data type is not constrained to be a string.

 https://cve.radiocsirt.org/vuln/ghsa-mxq8-mx56-69hw GHSA-mxq8-mx56-69hw 2026-10-08T01:05:27.375242+00:00

LTB (aka LDAP Tool Box) Self Service Password before 1.3 allows a change to a user password (without knowing the old password) via a crafted POST request, because the ldap_bind return value is mishandled and the PHP data type is not constrained to be a string.

 https://cve.radiocsirt.org/vuln/gsd-2018-12421 gsd-2018-12421 2026-10-08T01:05:27.375274+00:00 gsd-2018-12421