https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:24:32.182853+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05827 bdu:2022-05827 2026-10-08T22:24:32.191002+00:00 bdu:2022-05827 https://cve.radiocsirt.org/vuln/cnvd-2019-40300 cnvd-2019-40300 2026-10-08T22:24:32.191048+00:00 cnvd-2019-40300 https://cve.radiocsirt.org/vuln/euvd-2026-215911 EUVD-2026-215911 2026-10-08T22:24:32.191069+00:00 EUVD-2026-215911 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14824 fkie_cve-2019-14824 2026-10-08T22:24:32.191098+00:00

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.

 https://cve.radiocsirt.org/vuln/ghsa-8wxh-5wv6-x378 GHSA-8wxh-5wv6-x378 2026-10-08T22:24:32.191144+00:00

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.

 https://cve.radiocsirt.org/vuln/gsd-2019-14824 gsd-2019-14824 2026-10-08T22:24:32.191172+00:00 gsd-2019-14824 https://cve.radiocsirt.org/vuln/rhsa-2019:3401 RHSA-2019:3401 — Red Hat Security Advisory: 389-ds:1.4 security, bug fix, and enhancement update 2026-10-08T22:24:32.191190+00:00

389-ds-base: replication and the Retro Changelog plugin store plaintext password by default 389-ds-base: DoS via hanging secured connections 389-ds-base: using dscreate in verbose mode results in information disclosure 389-ds-base: Read permission check bypass via the deref plugin

 https://cve.radiocsirt.org/vuln/rhsa-2020:0464 RHSA-2020:0464 — Red Hat Security Advisory: 389-ds:1.4 security update 2026-10-08T22:24:32.191249+00:00

389-ds-base: Read permission check bypass via the deref plugin

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14824 UBUNTU-CVE-2019-14824 2026-10-08T22:24:32.191268+00:00

Affected: Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes.