https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:48:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04003 bdu:2022-04003 https://cve.radiocsirt.org/vuln/bdu:2022-04003 https://cve.radiocsirt.org/vuln/cnvd-2022-53546 cnvd-2022-53546 https://cve.radiocsirt.org/vuln/cnvd-2022-53546 https://cve.radiocsirt.org/vuln/euvd-2026-233957 EUVD-2026-233957 https://cve.radiocsirt.org/vuln/euvd-2026-233957 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31086 <p>LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf. This vulnerability could lead to a Remote Code Execution if the /config/templates/pdf/ directory is accessible for remote users. This is not a default configuration of LAM. This issue has been fixed in version 8.0. There are no known workarounds for this issue.</p> <p>LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf. This vulnerability could lead to a Remote Code Execution if the /config/templates/pdf/ directory is accessible for remote users. This is not a default configuration of LAM. This issue has been fixed in version 8.0. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-31086 https://cve.radiocsirt.org/vuln/gsd-2022-31086 gsd-2022-31086 https://cve.radiocsirt.org/vuln/gsd-2022-31086 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31086 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ldap-account-manager, Ubuntu:18.04:LTS: ldap-account-manager, Ubuntu:20.04:LTS: ldap-account-manager, Ubuntu:22.04:LTS: ldap-account-manager, Ubuntu:25.10: ldap-account-manager, Ubuntu:26.04:LTS: ldap-account-manager</p> <p>LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf. This vulnerability could lead to a Remote Code Execution if the /config/templates/pdf/ directory is accessible for remote users. This is not a default configuration of LAM. This issue has been fixed in version 8.0. There are no known workarounds for this issue.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ldap-account-manager, Ubuntu:18.04:LTS: ldap-account-manager, Ubuntu:20.04:LTS: ldap-account-manager, Ubuntu:22.04:LTS: ldap-account-manager, Ubuntu:25.10: ldap-account-manager, Ubuntu:26.04:LTS: ldap-account-manager</p> <p>LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf. This vulnerability could lead to a Remote Code Execution if the /config/templates/pdf/ directory is accessible for remote users. This is not a default configuration of LAM. This issue has been fixed in version 8.0. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-31086