https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T22:38:32.896897+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-06951 cnvd-2021-06951 2026-10-15T22:38:32.973777+00:00 cnvd-2021-06951 https://cve.radiocsirt.org/vuln/euvd-2026-36695 EUVD-2026-36695 2026-10-15T22:38:32.973814+00:00 EUVD-2026-36695 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5679 fkie_cve-2020-5679 2026-10-15T22:38:32.973828+00:00

Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted.

 https://cve.radiocsirt.org/vuln/ghsa-rwh8-h525-4jvj GHSA-rwh8-h525-4jvj — EC-CUBE Improper Restriction of Rendered UI Layers or Frames 2026-10-15T22:38:32.973859+00:00

Affected: Packagist: ec-cube/ec-cube

Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted.

 https://cve.radiocsirt.org/vuln/gsd-2020-5679 gsd-2020-5679 2026-10-15T22:38:32.973882+00:00 gsd-2020-5679 https://cve.radiocsirt.org/vuln/jvndb-2020-000080 jvndb-2020-000080 2026-10-15T22:38:32.973894+00:00

EC-CUBE provided by EC-CUBE CO.,LTD. contains multiple vulnerabilities listed below. * Clickjacking attacks (CWE-1021) - CVE-2020-5679 * Improper input validation (CWE-20) - CVE-2020-5680 EC-CUBE CO.,LTD. reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and EC-CUBE CO.,LTD. coordinated under the Information Security Early Warning Partnership.