https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T21:53:29.585923+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-41507 cnvd-2020-41507 2026-10-15T21:53:29.589933+00:00 cnvd-2020-41507 https://cve.radiocsirt.org/vuln/euvd-2026-41581 EUVD-2026-41581 2026-10-15T21:53:29.589967+00:00 EUVD-2026-41581 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13240 fkie_cve-2020-13240 2026-10-15T21:53:29.589981+00:00

The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mechanism against XSS.

 https://cve.radiocsirt.org/vuln/ghsa-f848-r5g6-6gpf GHSA-f848-r5g6-6gpf — Dolibarr Stored Cross-site Scripting 2026-10-15T21:53:29.590010+00:00

Affected: Packagist: dolibarr/dolibarr

The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mechanism against XSS.

 https://cve.radiocsirt.org/vuln/gsd-2020-13240 gsd-2020-13240 2026-10-15T21:53:29.590034+00:00 gsd-2020-13240 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13240 UBUNTU-CVE-2020-13240 2026-10-15T21:53:29.590045+00:00

Affected: Ubuntu:Pro:16.04:LTS: dolibarr

The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mechanism against XSS.