https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:46:05.822422+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-15276 cnvd-2018-15276 2026-10-02T20:46:05.826135+00:00 cnvd-2018-15276 https://cve.radiocsirt.org/vuln/euvd-2026-60792 EUVD-2026-60792 2026-10-02T20:46:05.826167+00:00 EUVD-2026-60792 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0571 fkie_cve-2018-0571 2026-10-02T20:46:05.826181+00:00

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.

 https://cve.radiocsirt.org/vuln/ghsa-3mcp-6rv6-c69g GHSA-3mcp-6rv6-c69g — baserCMS arbitrary file upload vulnerability 2026-10-02T20:46:05.826209+00:00

Affected: Packagist: baserproject/basercms

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.

 https://cve.radiocsirt.org/vuln/gsd-2018-0571 gsd-2018-0571 2026-10-02T20:46:05.826233+00:00 gsd-2018-0571 https://cve.radiocsirt.org/vuln/jvndb-2018-000055 jvndb-2018-000055 2026-10-02T20:46:05.826245+00:00

baserCMS provided by baserCMS Users Community is an opensource content management system. baserCMS contains multiple vulnerabilities listed below. *Command injection (CWE-94) - CVE-2018-0569 *Cross-site scripting (CWE-79) - CVE-2018-0570 *Unrestricted Upload of File with Dangerous Type in upload file management function (CWE-434) - CVE-2018-0571 *Restrict access permissions failure in contents management function (CWE-264) - CVE-2018-0572 *Restrict access permissions failture for a content with a period being public is expired (CWE-264) - CVE-2018-0573 *Cross-site scripting in theme management function (CWE-79) - CVE-2018-0574 *Restrict access permissions failure in the function to attach files in mail form (CWE-264) - CVE-2018-0575 Following researchers reported respective vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning partnership. CVE-2018-0569, CVE-2018-0570, CVE-2018-0571, CVE-2018-0572, and CVE-2018-0573 Toshitsugu Yoneyama and Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. CVE-2018-0574 and CVE-2018-0575 Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc.