https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T10:30:32.943323+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-65862 EUVD-2026-65862 2026-10-16T10:30:33.018983+00:00 EUVD-2026-65862 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12483 fkie_cve-2018-12483 2026-10-16T10:30:33.019028+00:00

OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdiscover_analyser rzo GET parameter is concatenated to a string used in an exec() call in the PHP code. Authentication is needed in order to exploit this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-pf98-mv3q-xgv6 GHSA-pf98-mv3q-xgv6 2026-10-16T10:30:33.019064+00:00

OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdiscover_analyser rzo GET parameter is concatenated to a string used in an exec() call in the PHP code. Authentication is needed in order to exploit this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2018-12483 gsd-2018-12483 2026-10-16T10:30:33.019082+00:00 gsd-2018-12483 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12483 UBUNTU-CVE-2018-12483 2026-10-16T10:30:33.019104+00:00

Affected: Ubuntu:16.04:LTS: ocsinventory-server, Ubuntu:18.04:LTS: ocsinventory-server

OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdiscover_analyser rzo GET parameter is concatenated to a string used in an exec() call in the PHP code. Authentication is needed in order to exploit this vulnerability.