https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T16:04:51.358977+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-184736 EUVD-2026-184736 2026-10-28T16:04:51.434180+00:00 EUVD-2026-184736 https://cve.radiocsirt.org/vuln/fkie_cve-2013-3654 fkie_cve-2013-3654 2026-10-28T16:04:51.434223+00:00

Directory traversal vulnerability in LOCKON EC-CUBE 2.12.0 through 2.12.4 allows remote attackers to read arbitrary image files via vectors related to data/class/SC_CheckError.php and data/class/SC_FormParam.php, a different vulnerability than CVE-2013-3650.

 https://cve.radiocsirt.org/vuln/ghsa-g4rq-mc9f-8hv5 GHSA-g4rq-mc9f-8hv5 2026-10-28T16:04:51.434268+00:00

Directory traversal vulnerability in LOCKON EC-CUBE 2.12.0 through 2.12.4 allows remote attackers to read arbitrary image files via vectors related to data/class/SC_CheckError.php and data/class/SC_FormParam.php, a different vulnerability than CVE-2013-3650.

 https://cve.radiocsirt.org/vuln/gsd-2013-3654 gsd-2013-3654 2026-10-28T16:04:51.434303+00:00 gsd-2013-3654 https://cve.radiocsirt.org/vuln/jvndb-2013-000065 jvndb-2013-000065 2026-10-28T16:04:51.434324+00:00

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a directory traversal vulnerability. Note that this vulnerability is different from JVN#43886811. LOCKON CO.,LTD. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. LOCKON CO.,LTD. credits System Friend,lnc. for reporting this vulnerability.