https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T11:18:22.280301+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-11449 cnvd-2016-11449 2026-10-18T11:18:22.284634+00:00 cnvd-2016-11449 https://cve.radiocsirt.org/vuln/euvd-2026-86838 EUVD-2026-86838 2026-10-18T11:18:22.284685+00:00 EUVD-2026-86838 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7813 fkie_cve-2016-7813 2026-10-18T11:18:22.284713+00:00

Cross-site scripting vulnerability in DERAEMON-CMS version 0.8.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the parameters hostname, database and username.

 https://cve.radiocsirt.org/vuln/ghsa-x4q5-6v5x-73cq GHSA-x4q5-6v5x-73cq 2026-10-18T11:18:22.284753+00:00

Cross-site scripting vulnerability in DERAEMON-CMS version 0.8.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the parameters hostname, database and username.

 https://cve.radiocsirt.org/vuln/gsd-2016-7813 gsd-2016-7813 2026-10-18T11:18:22.284780+00:00 gsd-2016-7813 https://cve.radiocsirt.org/vuln/jvndb-2016-000220 jvndb-2016-000220 2026-10-18T11:18:22.284804+00:00

DERAEMON-CMS provided by TEAM DERAEMONS is a content management system (CMS). install.php in DERAEMON-CMS contains a cross-site scripting vulnerability (CWE-79) due to a flaw in processing of the parameters hostname, database and username. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.