https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T15:19:35.495928+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-16349 cnvd-2021-16349 2026-10-18T15:19:35.522107+00:00 cnvd-2021-16349 https://cve.radiocsirt.org/vuln/euvd-2026-21752 EUVD-2026-21752 2026-10-18T15:19:35.522152+00:00 EUVD-2026-21752 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20668 fkie_cve-2021-20668 2026-10-18T15:19:35.522173+00:00

Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read an arbitrary path via a specially crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-37g3-f8w7-7773 GHSA-37g3-f8w7-7773 2026-10-18T15:19:35.522213+00:00

Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read an arbitrary path via a specially crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2021-20668 gsd-2021-20668 2026-10-18T15:19:35.522239+00:00 gsd-2021-20668 https://cve.radiocsirt.org/vuln/jvndb-2021-001123 jvndb-2021-001123 2026-10-18T15:19:35.522262+00:00

GROWI provided by WESEEK, Inc. contains multiple vulnerabilities listed below. Stored Cross-site Scripting (CWE-79) - CVE-2021-20667 Path Traversal (CWE-22) - CVE-2021-20668 Path Traversal (CWE-22) - CVE-2021-20669 Improper Access Control (CWE-284) - CVE-2021-20670 Improper Input Validation (CWE-20) - CVE-2021-20671 Site Scripting (CWE-79) - CVE-2021-20829 stypr of Flatt Security Inc. reported these vulnerabilities to the developer and coordinated on his own. After coordination was completed, this case was reported to JPCERT/CC, and JPCERT/CC coordinated with the developer for the publication.