Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

LuxSoft vulnerabilities

9 published CVEs name LuxSoft among the affected products.

Published CVEs
9
Last 12 months
1
Critical
2
Known exploited
0

Critical 2High 2Medium 5Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20234
  2. 20254
  3. 20261

Newest CVEs

  • CVE-2026-36989

    A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php.

    LuxSoft · LuxCal Web Calendar

    Medium5.8
  • CVE-2025-25224

    The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dloader.php. If…

    LuxSoft · The LuxCal Web Calendar

    Medium5.3
  • CVE-2025-25223

    The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a path traversal vulnerability in dloader.php. If this…

    LuxSoft · The LuxCal Web Calendar

    Medium5.8
  • CVE-2025-25222

    The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in retrieve.php. If this…

    LuxSoft · The LuxCal Web Calendar

    High7.3
  • CVE-2025-25221

    The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection vulnerability in pdf.php. If this…

    LuxSoft · The LuxCal Web Calendar

    High7.3
  • CVE-2023-47175

    Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a…

    LuxSoft · LuxCal Web Calendar

    Medium6.1
  • CVE-2023-46700

    SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) allows a remote…

    LuxSoft · LuxCal Web Calendar

    Critical9.8
  • CVE-2023-39939

    SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a remote…

    LuxSoft · LuxCal Web Calendar

    Critical9.1
  • CVE-2023-39543

    Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.3M (MySQL version) and LuxCal Web Calendar prior to 5.2.3L (SQLite version) allows a…

    LuxSoft · LuxCal Web Calendar

    Medium6.1