https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T14:51:18.677228+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-168026 EUVD-2026-168026 2026-10-16T14:51:18.741155+00:00 EUVD-2026-168026 https://cve.radiocsirt.org/vuln/fkie_cve-2013-3651 fkie_cve-2013-3651 2026-10-16T14:51:18.741193+00:00

LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers to conduct unspecified PHP code-injection attacks via a crafted string, related to data/class/SC_CheckError.php and data/class/SC_FormParam.php.

 https://cve.radiocsirt.org/vuln/ghsa-w79g-rg56-5hxw GHSA-w79g-rg56-5hxw 2026-10-16T14:51:18.741226+00:00

LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers to conduct unspecified PHP code-injection attacks via a crafted string, related to data/class/SC_CheckError.php and data/class/SC_FormParam.php.

 https://cve.radiocsirt.org/vuln/gsd-2013-3651 gsd-2013-3651 2026-10-16T14:51:18.741244+00:00 gsd-2013-3651 https://cve.radiocsirt.org/vuln/jvndb-2013-000062 jvndb-2013-000062 2026-10-16T14:51:18.741255+00:00

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a code injection vulnerability. Gen Sato reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.