https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T15:19:03.286224+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-16348 cnvd-2021-16348 2026-10-18T15:19:03.289634+00:00 cnvd-2021-16348 https://cve.radiocsirt.org/vuln/euvd-2026-21732 EUVD-2026-21732 2026-10-18T15:19:03.289670+00:00 EUVD-2026-21732 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20669 fkie_cve-2021-20669 2026-10-18T15:19:03.289684+00:00

Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read and/or delete an arbitrary path via a specially crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-2f5v-p83c-vrjp GHSA-2f5v-p83c-vrjp 2026-10-18T15:19:03.289712+00:00

Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read and/or delete an arbitrary path via a specially crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2021-20669 gsd-2021-20669 2026-10-18T15:19:03.289727+00:00 gsd-2021-20669 https://cve.radiocsirt.org/vuln/jvndb-2021-001123 jvndb-2021-001123 2026-10-18T15:19:03.289738+00:00

GROWI provided by WESEEK, Inc. contains multiple vulnerabilities listed below. Stored Cross-site Scripting (CWE-79) - CVE-2021-20667 Path Traversal (CWE-22) - CVE-2021-20668 Path Traversal (CWE-22) - CVE-2021-20669 Improper Access Control (CWE-284) - CVE-2021-20670 Improper Input Validation (CWE-20) - CVE-2021-20671 Site Scripting (CWE-79) - CVE-2021-20829 stypr of Flatt Security Inc. reported these vulnerabilities to the developer and coordinated on his own. After coordination was completed, this case was reported to JPCERT/CC, and JPCERT/CC coordinated with the developer for the publication.