https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T03:57:11.530886+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-124806 EUVD-2026-124806 2026-10-27T03:57:11.580042+00:00 EUVD-2026-124806 https://cve.radiocsirt.org/vuln/fkie_cve-2009-4353 fkie_cve-2009-4353 2026-10-27T03:57:11.580078+00:00

The Mobile Edition of TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly other versions before 2003.0139.0911, does not remove the session ID in a Referer URL, which allows remote attackers to hijack web sessions via vectors such as an email with an embedded URL.

 https://cve.radiocsirt.org/vuln/ghsa-wmgr-c4qp-wqxx GHSA-wmgr-c4qp-wqxx 2026-10-27T03:57:11.580111+00:00

The Mobile Edition of TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly other versions before 2003.0139.0911, does not remove the session ID in a Referer URL, which allows remote attackers to hijack web sessions via vectors such as an email with an embedded URL.

 https://cve.radiocsirt.org/vuln/gsd-2009-4353 gsd-2009-4353 2026-10-27T03:57:11.580127+00:00 gsd-2009-4353 https://cve.radiocsirt.org/vuln/jvndb-2009-000076 jvndb-2009-000076 2026-10-27T03:57:11.580139+00:00

Active! mail 2003 from TransWARE Co. contains a vulnerability in which session IDs may be disclosed. Active! mail 2003 from TransWARE Co. is a web-based email software. Active! mail 2003 contains a vulnerability in which session IDs may be disclosed. Kenichi Maehashi of CIS RAT at Hosei University reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.