https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T03:56:30.455903+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-03750 cnvd-2015-03750 2026-10-27T03:56:30.523431+00:00 cnvd-2015-03750 https://cve.radiocsirt.org/vuln/euvd-2026-91561 EUVD-2026-91561 2026-10-27T03:56:30.523470+00:00 EUVD-2026-91561 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2995 fkie_cve-2015-2995 2026-10-27T03:56:30.523485+00:00

The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload and execute arbitrary files via a NULL byte after the extension, as demonstrated by a .war%00 file.

 https://cve.radiocsirt.org/vuln/ghsa-hph9-364j-3q7q GHSA-hph9-364j-3q7q 2026-10-27T03:56:30.523514+00:00

The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload and execute arbitrary files via a NULL byte after the extension, as demonstrated by a .war%00 file.

 https://cve.radiocsirt.org/vuln/gsd-2015-2995 gsd-2015-2995 2026-10-27T03:56:30.523532+00:00 gsd-2015-2995