LU
Vendor
LuxSoft
15
CVEs
0
On KEV
0
New 30D
Products
LW9.8
LuxCal Web Calendar
LuxSoft
9 CVEs0 on KEV0 new
TL9.8
The LuxCal Web Calendar
LuxSoft
4 CVEs0 on KEV0 new
LU9.8
Luxcal
Luxsoft
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-36989 | LW LuxCal Web Calendar LuxSoft | 5.8 | Sep 13 | A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php |
| CVE-2025-25224 | TL The LuxCal Web Calendar LuxSoft | 7.5 | Feb 18 | The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dloader.php |
| CVE-2025-25223 | TL The LuxCal Web Calendar LuxSoft | 5.3 | Feb 18 | The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path traversal vulnerability in dloader.php |
| CVE-2025-25222 | TL The LuxCal Web Calendar LuxSoft | 9.8 | Feb 18 | The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrieve.php |
| CVE-2025-25221 | TL The LuxCal Web Calendar LuxSoft | 9.8 | Feb 18 | The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php |
| CVE-2023-47175 | LW LuxCal Web Calendar LuxSoft | 6.1 | Nov 20 | Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated… |
| CVE-2023-46700 | LW LuxCal Web Calendar LuxSoft | 9.8 | Nov 20 | SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote unauthenticated… |
| CVE-2023-39939 | LW LuxCal Web Calendar LuxSoft | 9.1 | Aug 21 | SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated… |
| CVE-2023-39543 | LW LuxCal Web Calendar LuxSoft | 6.1 | Aug 21 | Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote unauthenticated… |
| CVE-2021-45915 | LU Luxcal Luxsoft | 9.8 | May 24 | In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value |
| CVE-2021-45914 | LU Luxcal Luxsoft | 9.8 | May 24 | In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request |