https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T12:48:45.520109+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-21135 cnvd-2019-21135 2026-10-22T12:48:45.525294+00:00 cnvd-2019-21135 https://cve.radiocsirt.org/vuln/euvd-2026-60901 EUVD-2026-60901 2026-10-22T12:48:45.525339+00:00 EUVD-2026-60901 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0658 fkie_cve-2018-0658 2026-10-22T12:48:45.525362+00:00

Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-rjmh-9927-cj3q GHSA-rjmh-9927-cj3q 2026-10-22T12:48:45.525415+00:00

Input validation issue in EC-CUBE Payment Module (2.12) version 3.5.23 and earlier, EC-CUBE Payment Module (2.11) version 2.3.17 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.12) version 3.5.23 and earlier, GMO-PG Payment Module (PG Multi-Payment Service) (2.11) version 2.3.17 and earlier allows an attacker with administrative rights to execute arbitrary PHP code on the server via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2018-0658 gsd-2018-0658 2026-10-22T12:48:45.525450+00:00 gsd-2018-0658 https://cve.radiocsirt.org/vuln/jvndb-2018-000086 jvndb-2018-000086 2026-10-22T12:48:45.525469+00:00

EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service), which are additional modules for EC-CUBE, provided by GMO Payment Gateway, Inc. contain multiple vulnerabilities listed below. * Cross-site scripting vulnerability in the management screen (CWE-79) - CVE-2018-0657 * Input validation bypass vulnerability in the management screen (CWE-20) - CVE-2018-0658 Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.