{"kind": "product", "path": "vulns/debian-12/ldap-account-manager", "name": "ldap-account-manager", "product": "ldap-account-manager", "ecosystem": "Debian:12", "items": [{"id": "CVE-2026-55167", "noindex": false, "published": "2026-10-14T18:23:26.148Z", "modified": "2026-10-20T01:48:49.540Z", "cvss": 4.2, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "severity": "medium", "epss": 0.00206, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-55167", "title": "LDAP Account Manager: WebAuthn authentication challenge is kept in the PHP session", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-factor authentication leave the challenge in the same PHP session after the authentication response is processed. A user who has already completed valid password authentication can therefore retain the same signed WebAuthn ceremony state instead of consuming it once. The practical risk is limited by the requirement for a valid password, the same PHP session, and a valid authenticator signature. This issue is fixed in version 9.6.", "references": ["https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-xgjg-fchx-x3g3", "https://github.com/LDAPAccountManager/lam/commit/a56dcaab3e0f572283f5861404ed58d5ea301bc6", "https://github.com/LDAPAccountManager/lam/releases/tag/9.6"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-27894", "noindex": false, "published": "2026-03-17T23:48:06.530Z", "modified": "2026-03-18T19:54:13.831Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00386, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-27894", "title": "LAM has Authenticated Local File Inclusion (LFI) in PDF export", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to version 9.5, a local file inclusion was detected in the PDF export that allows users to include local PHP files and this way execute code. In combination with GHSA-88hf-2cjm-m9g8 this allows to execute arbitrary code. Users need to login to LAM to exploit this vulnerability. Version 9.5 fixes the issue. Although upgrading is recommended, a workaround would be to make /var/lib/ldap-account-manager/config read-only for the web-server user and delete the PDF profile files (making PDF exports impossible).", "references": ["https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-w7xq-vjr3-p9cf", "https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-88hf-2cjm-m9g8", "https://github.com/LDAPAccountManager/lam/releases/tag/9.5"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2025-58174", "noindex": false, "published": "2025-09-16T16:29:37.615Z", "modified": "2025-09-16T18:26:38.482Z", "cvss": 4.6, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "severity": "medium", "epss": 0.00178, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-58174", "title": "LAM profile editor stored cross-site scripting vulnerability", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM before 9.3 allows stored cross-site scripting in the Profile section via the profile name field, which renders untrusted input as HTML and executes a supplied script (for example a script element). An authenticated user with permission to create or edit a profile can insert a script payload into the profile name and have it executed when the profile data is viewed in a browser. This issue is fixed in version 9.3. No known workarounds are mentioned.", "references": ["https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-6gqg-wm9x-5x3m", "https://nvd.nist.gov/vuln/detail/CVE-2025-58174"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2024-52792", "noindex": false, "published": "2024-12-17T21:46:27.319Z", "modified": "2024-12-18T15:37:01.733Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "severity": "medium", "epss": 0.00705, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-52792", "title": "Arbitrary config values override in lam", "description": "LDAP Account Manager (LAM) is a php webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In affected versions LAM does not properly sanitize configuration values, that are set via `mainmanage.php` and `confmain.php`. This allows setting arbitrary config values and thus effectively bypassing `mitigation` of CVE-2024-23333/GHSA-fm9w-7m7v-wxqv. Configuration values for the main config or server profiles are set via `mainmanage.php` and `confmain.php`.\nThe values are written to `config.cfg` or `serverprofile.conf` in the format of `settingsName: settingsValue` line-by-line.\nAn attacker can smuggle arbi", "references": ["https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-6cp9-j5r7-xhcc", "https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-fm9w-7m7v-wxqv", "https://github.com/LDAPAccountManager/lam/blob/fd665fef3b222bf8205154b14f676815d2d6ae20/lam/templates/config/mainmanage.php#L263"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2024-23333", "noindex": false, "published": "2024-03-18T21:07:09.513Z", "modified": "2024-08-21T15:04:56.308Z", "cvss": 7.9, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:H", "severity": "high", "epss": 0.1775, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-23333", "title": "LAM vulnerable to Authenticated Remote Code Execution", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM's log configuration allows to specify arbitrary paths for log files. Prior to version 8.7, an attacker could exploit this by creating a PHP file and cause LAM to log some PHP code to this file. When the file is then accessed via web the code would be executed. The issue is mitigated by the following: An attacker needs to know LAM's master configuration password to be able to change the main settings; and the webserver needs write access to a directory that is accessible via web. LAM itself does not provide any such directories. The issue has been", "references": ["https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-fm9w-7m7v-wxqv", "https://github.com/LDAPAccountManager/lam/releases/tag/8.7", "https://nvd.nist.gov/vuln/detail/CVE-2024-23333"], "fixes": [], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2022-31085", "noindex": false, "published": "2022-06-27T20:55:21.000Z", "modified": "2025-04-23T18:07:04.817Z", "cvss": 5.5, "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "severity": "medium", "epss": 0.00272, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-31085", "title": "Missing Encryption of Sensitive Data in ldap-account-manager", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the session files include the LDAP user name and password in clear text if the PHP OpenSSL extension is not installed or encryption is disabled by configuration. This issue has been fixed in version 8.0. Users unable to upgrade should install the PHP OpenSSL extension and make sure session encryption is enabled in LAM main configuration.", "references": ["https://github.com/LDAPAccountManager/lam/commit/f1d5d04952f39a1b4ea203d3964fa88e1429dfd4", "https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-6m3q-5c84-6h6j", "https://www.debian.org/security/2022/dsa-5177"], "fixes": ["8.0.1-1"], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2022-31084", "noindex": false, "published": "2022-06-27T20:55:11.000Z", "modified": "2025-04-22T17:53:34.621Z", "cvss": 9, "cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.02485, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-31084", "title": "Unauthenticated Remote Code Execution in ldap-account-manager", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 There are cases where LAM instantiates objects from arbitrary classes. An attacker can inject the first constructor argument. This can lead to code execution if non-LAM classes are instantiated that execute code during object creation. This issue has been fixed in version 8.0.", "references": ["https://github.com/LDAPAccountManager/lam/commit/f1d5d04952f39a1b4ea203d3964fa88e1429dfd4", "https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-r387-grjx-qgvw", "https://www.debian.org/security/2022/dsa-5177"], "fixes": ["8.0.1-1"], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2022-31086", "noindex": false, "published": "2022-06-27T20:50:21.000Z", "modified": "2025-04-23T18:07:11.602Z", "cvss": 6.6, "cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "severity": "medium", "epss": 0.02287, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-31086", "title": "Incorrect Regular Expressions in ldap-account-manager", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf. This vulnerability could lead to a Remote Code Execution if the /config/templates/pdf/ directory is accessible for remote users. This is not a default configuration of LAM. This issue has been fixed in version 8.0. There are no known workarounds for this issue.", "references": ["https://github.com/LDAPAccountManager/lam/commit/f1d5d04952f39a1b4ea203d3964fa88e1429dfd4", "https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-q9pc-x84w-982x", "https://www.debian.org/security/2022/dsa-5177"], "fixes": ["8.0.1-1"], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2022-31087", "noindex": false, "published": "2022-06-27T20:50:11.000Z", "modified": "2025-04-23T18:07:18.371Z", "cvss": 7.8, "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00439, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-31087", "title": "Incorrect Default Permissions in ldap-account-manager", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the tmp directory, which is accessible by /lam/tmp/, allows interpretation of .php (and .php5/.php4/.phpt/etc) files. An attacker capable of writing files under www-data privileges can write a web-shell into this directory, and gain a Code Execution on the host. This issue has been fixed in version 8.0. Users unable to upgrade should disallow executing PHP scripts in (/var/lib/ldap-account-manager/)tmp directory.", "references": ["https://github.com/LDAPAccountManager/lam/commit/f1d5d04952f39a1b4ea203d3964fa88e1429dfd4", "https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-q8g5-45m4-q95p", "https://www.debian.org/security/2022/dsa-5177"], "fixes": ["8.0.1-1"], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2022-31088", "noindex": false, "published": "2022-06-27T20:45:18.000Z", "modified": "2025-04-23T18:07:24.243Z", "cvss": 6.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "severity": "medium", "epss": 0.01308, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-31088", "title": "Unauthenticated LDAP Injection in ldap-account-manager", "description": "LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In versions prior to 8.0 the user name field at login could be used to enumerate LDAP data. This is only the case for LDAP search configuration. This issue has been fixed in version 8.0.", "references": ["https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-wxf8-9x99-6gp4", "https://github.com/LDAPAccountManager/lam/commit/f1d5d04952f39a1b4ea203d3964fa88e1429dfd4", "https://www.debian.org/security/2022/dsa-5177"], "fixes": ["8.0.1-1"], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2022-24851", "noindex": false, "published": "2022-04-15T18:45:18.000Z", "modified": "2025-04-22T18:15:26.514Z", "cvss": 8.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N", "severity": "high", "epss": 0.01113, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-24851", "title": "Stored XSS and path traversal in LDAPAccountManager/lam", "description": "LDAP Account Manager (LAM) is an open source web frontend for managing entries stored in an LDAP directory. The profile editor tool has an edit profile functionality, the parameters on this page are not properly sanitized and hence leads to stored XSS attacks. An authenticated user can store XSS payloads in the profiles, which gets triggered when any other user try to access the edit profile page. The pdf editor tool has an edit pdf profile functionality, the logoFile parameter in it is not properly sanitized and an user can enter relative paths like ../../../../../../../../../../../../../usr/share/icons/hicolor/48x48/apps/gvim.png via tools ", "references": ["https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-f2fr-cccr-583v", "https://github.com/LDAPAccountManager/lam/issues/170", "https://github.com/LDAPAccountManager/lam/commit/3c6f09a3579e048e224eb5a4c4e3eefaa8bccd49"], "fixes": ["7.9.1-1"], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2012-1115", "noindex": false, "published": "2019-12-05T20:20:25.000Z", "modified": "2024-08-06T18:45:27.466Z", "cvss": 6.1, "cvss_vector": "", "severity": "medium", "epss": 0.01576, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2012-1115", "title": "CVE-2012-1115", "description": "A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php.", "references": ["http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089328.html", "https://security-tracker.debian.org/tracker/CVE-2012-1115", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1115"], "fixes": ["3.6-2"], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2012-1114", "noindex": false, "published": "2019-12-05T20:03:52.000Z", "modified": "2024-08-06T18:45:27.370Z", "cvss": 6.1, "cvss_vector": "", "severity": "medium", "epss": 0.01576, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2012-1114", "title": "CVE-2012-1114", "description": "A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php.", "references": ["https://security-tracker.debian.org/tracker/CVE-2012-1114", "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1114", "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089328.html"], "fixes": ["3.6-2"], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2018-8764", "noindex": false, "published": "2018-03-27T16:00:00.000Z", "modified": "2024-08-05T07:02:26.009Z", "cvss": 8.8, "cvss_vector": "", "severity": "high", "epss": 0.01271, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2018-8764", "title": "CVE-2018-8764", "description": "Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF token in the sec_token parameter of a URI, which makes it easier for remote attackers to defeat a CSRF protection mechanism by leveraging logging.", "references": ["https://www.debian.org/security/2018/dsa-4165", "http://packetstormsecurity.com/files/146858/LDAP-Account-Manager-6.2-Cross-Site-Scripting.html", "http://seclists.org/fulldisclosure/2018/Mar/45"], "fixes": ["6.3-1"], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2018-8763", "noindex": false, "published": "2018-03-27T16:00:00.000Z", "modified": "2024-08-05T07:02:26.031Z", "cvss": 6.1, "cvss_vector": "", "severity": "medium", "epss": 0.01497, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2018-8763", "title": "CVE-2018-8763", "description": "Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 has XSS via the dn parameter to the templates/3rdParty/pla/htdocs/cmd.php URI or the template parameter to the templates/3rdParty/pla/htdocs/cmd.php?cmd=rename_form URI.", "references": ["https://www.debian.org/security/2018/dsa-4165", "https://lists.debian.org/debian-lts-announce/2018/04/msg00007.html", "http://packetstormsecurity.com/files/146858/LDAP-Account-Manager-6.2-Cross-Site-Scripting.html"], "fixes": ["6.3-1"], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2013-4453", "noindex": false, "published": "2013-11-05T20:00:00.000Z", "modified": "2024-08-06T16:45:14.246Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": 0.01355, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2013-4453", "title": "CVE-2013-4453", "description": "Cross-site scripting (XSS) vulnerability in templates/login.php in LDAP Account Manager (LAM) 4.3 and 4.2.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter.", "references": ["http://seclists.org/oss-sec/2013/q4/149", "http://osvdb.org/98828", "http://secunia.com/advisories/55413"], "fixes": ["4.4-1"], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2007-1840", "noindex": false, "published": "2007-04-03T00:00:00.000Z", "modified": "2024-08-07T13:13:41.062Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": 0.01321, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2007-1840", "title": "CVE-2007-1840", "description": "lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting (XSS).", "references": ["http://lam.cvs.sourceforge.net/lam/lam/lib/modules.inc?r1=1.173&r2=1.174", "http://www.us.debian.org/security/2007/dsa-1287", "http://www.vupen.com/english/advisories/2007/1149"], "fixes": ["1.1.1-2"], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}, {"id": "CVE-2006-7191", "noindex": false, "published": "2007-04-03T00:00:00.000Z", "modified": "2024-08-07T20:57:40.765Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": 0.00334, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2006-7191", "title": "CVE-2006-7191", "description": "Untrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0 allows local users to gain privileges via a modified PATH that points to a malicious rm program.", "references": ["http://lam.cvs.sourceforge.net/lam/lam/lib/lamdaemon.pl?r1=1.32&r2=1.33", "http://www.us.debian.org/security/2007/dsa-1287", "http://lam.cvs.sourceforge.net/lam/lam/lib/lamdaemon.pl"], "fixes": ["1.0.0-1"], "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}]}], "total": 18, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 1, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "ldap-account-manager", "path": "vulns/debian-12/ldap-account-manager", "ecosystem": "Debian:12"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 1, "kev": 0}, "lastmod": "2026-10-20T01:48:49.540Z", "early_advisories": [], "license": "You may freely use the PatchFirst selection and our additions (priorities, early warnings, texts, summaries and aggregates) for your own purposes, including internal business use. Resale, commercial distribution and bulk mirroring of this selection or these additions require a written agreement with the operator. Whenever you use or publish the selection or our additions, credit PatchFirst (https://patchfirst.dev/vulns/) with this link to the regional feed page. Original records from open sources remain subject to their respective licenses and terms. These conditions do not restrict your rights to the original data, which you can obtain directly from those sources.", "terms_url": "https://patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "Records are selected, normalized and combined by PatchFirst; summaries and translations may be added. News is credited with a link to the original source in each entry.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Upstream licenses vary; see the source catalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Free public scores; attribution requested (FIRST EPSS, scores generated by Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}