https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:28:32.917217+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-15277 cnvd-2018-15277 2026-10-02T11:28:32.920791+00:00 cnvd-2018-15277 https://cve.radiocsirt.org/vuln/euvd-2026-60772 EUVD-2026-60772 2026-10-02T11:28:32.920823+00:00 EUVD-2026-60772 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0573 fkie_cve-2018-0573 2026-10-02T11:28:32.920838+00:00

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-33fq-qm4m-cjw3 GHSA-33fq-qm4m-cjw3 — baserCMS Access Control Bypass 2026-10-02T11:28:32.920865+00:00

Affected: Packagist: baserproject/basercms

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2018-0573 gsd-2018-0573 2026-10-02T11:28:32.920888+00:00 gsd-2018-0573 https://cve.radiocsirt.org/vuln/jvndb-2018-000055 jvndb-2018-000055 2026-10-02T11:28:32.920899+00:00

baserCMS provided by baserCMS Users Community is an opensource content management system. baserCMS contains multiple vulnerabilities listed below. *Command injection (CWE-94) - CVE-2018-0569 *Cross-site scripting (CWE-79) - CVE-2018-0570 *Unrestricted Upload of File with Dangerous Type in upload file management function (CWE-434) - CVE-2018-0571 *Restrict access permissions failure in contents management function (CWE-264) - CVE-2018-0572 *Restrict access permissions failture for a content with a period being public is expired (CWE-264) - CVE-2018-0573 *Cross-site scripting in theme management function (CWE-79) - CVE-2018-0574 *Restrict access permissions failure in the function to attach files in mail form (CWE-264) - CVE-2018-0575 Following researchers reported respective vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning partnership. CVE-2018-0569, CVE-2018-0570, CVE-2018-0571, CVE-2018-0572, and CVE-2018-0573 Toshitsugu Yoneyama and Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. CVE-2018-0574 and CVE-2018-0575 Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc.