https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T17:49:17.449271+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-03881 cnvd-2015-03881 2026-10-21T17:49:17.453080+00:00 cnvd-2015-03881 https://cve.radiocsirt.org/vuln/euvd-2026-91495 EUVD-2026-91495 2026-10-21T17:49:17.453122+00:00 EUVD-2026-91495 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2952 fkie_cve-2015-2952 2026-10-21T17:49:17.453143+00:00

The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote authenticated users to bypass intended access restrictions and modify administrative credentials via unspecified vectors, a different vulnerability than CVE-2015-2953 and CVE-2015-2958.

 https://cve.radiocsirt.org/vuln/ghsa-h77g-982g-3xg3 GHSA-h77g-982g-3xg3 2026-10-21T17:49:17.453189+00:00

The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote authenticated users to bypass intended access restrictions and modify administrative credentials via unspecified vectors, a different vulnerability than CVE-2015-2953 and CVE-2015-2958.

 https://cve.radiocsirt.org/vuln/gsd-2015-2952 gsd-2015-2952 2026-10-21T17:49:17.453225+00:00 gsd-2015-2952 https://cve.radiocsirt.org/vuln/jvndb-2015-000077 jvndb-2015-000077 2026-10-21T17:49:17.453259+00:00

MilkyStep provided by Igreks Inc. is a CGI for e-mail newsletter distribution management. MilkyStep fails to restrict access permissions against the management function for user information (CWE-284). Note that this vulnerability is different from JVN#16409640 or JVN#74280258. Kusano Kazuhiko reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.