EUVD-2022-39839

Malicious code in bioql PyPI...

EUVD-2021-28029

Malicious code in bioql PyPI...

[SECURITY] Fedora 42 Update: lemonldap-ng-2.21.3-1.fc42

LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It simplifies the build of a protected area with a few changes in the application. It manages both authentication and authorization and provides headers for accounting. So you can have a full AAA protection for your web space as...

[SECURITY] Fedora 43 Update: lemonldap-ng-2.21.3-1.fc43

LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It simplifies the build of a protected area with a few changes in the application. It manages both authentication and authorization and provides headers for accounting. So you can have a full AAA protection for your web space as...

Fedora 41 : lemonldap-ng (2025-67d99d2c39)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-67d99d2c39 advisory. See https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-21-3-is-out/ Tenable has extracted the preceding description block directly from the Fedora...

Fedora 43 : lemonldap-ng (2025-27d58d0125)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-27d58d0125 advisory. See https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-21-3-is-out/ Tenable has extracted the preceding description block directly from the Fedora...

Fedora 42 : lemonldap-ng (2025-72e47ed215)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-72e47ed215 advisory. See https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-21-3-is-out/ Tenable has extracted the preceding description block directly from the Fedora...

Fedora: Security Advisory (FEDORA-2025-67d99d2c39)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-72e47ed215)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-59518

In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize during rule evaluation. Thus, an administrator who can edit a rule evaluated by the Safe jail can execute commands on the server...

UBUNTU-CVE-2025-59518

In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize during rule evaluation. Thus, an administrator who can edit a rule evaluated by the Safe jail can execute commands on the server...

CVE-2025-59518

In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize during rule evaluation. Thus, an administrator who can edit a rule evaluated by the Safe jail can execute commands on the server...

PT-2025-38108

Name of the Vulnerable Software and Affected Versions: LemonLDAP::NG versions prior to 2.16.7 LemonLDAP::NG versions 2.17 through 2.21 before 2.21.3 Description: LemonLDAP::NG is susceptible to OS command injection within the Safe jail. The software fails to localize the underscore character duri...

CVE-2025-59518

CVE-2025-59518 affects LemonLDAP::NG versions prior to 2.16.7 and 2.17 through 2.21 before 2.21.3, where the Safe jail can be exploited for OS command injection. The root cause is that Safe jail rules are not localized during evaluation, allowing an administrator who edits a rule to execute comma...

CVE-2025-59518

In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize during rule evaluation. Thus, an administrator who can edit a rule evaluated by the Safe jail can execute commands on the server...

CVE-2025-59518

In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize during rule evaluation. Thus, an administrator who can edit a rule evaluated by the Safe jail can execute commands on the server...

Linux Distros Unpatched Vulnerability : CVE-2021-35473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in LemonLDAP::NG before 2.0.12. There is a missing expiration check in the OAuth2.0 handler, i.e., it does not verify access token...

Linux Distros Unpatched Vulnerability : CVE-2024-48933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting XSS vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers to inject arbitrary web script or HTML into the login page via a...

Linux Distros Unpatched Vulnerability : CVE-2019-15941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect authorization request...

Linux Distros Unpatched Vulnerability : CVE-2022-37186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting. This can occur when...