https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T03:47:36.947060+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-180387 EUVD-2026-180387 2026-10-20T03:47:37.031839+00:00 EUVD-2026-180387 https://cve.radiocsirt.org/vuln/fkie_cve-2013-3650 fkie_cve-2013-3650 2026-10-20T03:47:37.031885+00:00

Directory traversal vulnerability in the lfCheckFileName function in data/class/pages/LC_Page_ResizeImage.php in LOCKON EC-CUBE before 2.12.5 allows remote attackers to read arbitrary image files via vectors involving the image parameter to resize_image.php, a different vulnerability than CVE-2013-3654.

 https://cve.radiocsirt.org/vuln/ghsa-r32w-gjvq-x744 GHSA-r32w-gjvq-x744 2026-10-20T03:47:37.031931+00:00

Directory traversal vulnerability in the lfCheckFileName function in data/class/pages/LC_Page_ResizeImage.php in LOCKON EC-CUBE before 2.12.5 allows remote attackers to read arbitrary image files via vectors involving the image parameter to resize_image.php, a different vulnerability than CVE-2013-3654.

 https://cve.radiocsirt.org/vuln/gsd-2013-3650 gsd-2013-3650 2026-10-20T03:47:37.031982+00:00 gsd-2013-3650 https://cve.radiocsirt.org/vuln/jvndb-2013-000061 jvndb-2013-000061 2026-10-20T03:47:37.031997+00:00

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a directory traversal vulnerability. Note that this vulnerability is different from JVN#04161229. Gen Sato reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.