https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T12:47:52.678452+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-16347 cnvd-2021-16347 2026-10-18T12:47:52.681652+00:00 cnvd-2021-16347 https://cve.radiocsirt.org/vuln/euvd-2026-21730 EUVD-2026-21730 2026-10-18T12:47:52.681686+00:00 EUVD-2026-21730 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20670 fkie_cve-2021-20670 2026-10-18T12:47:52.681701+00:00

Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to read the user's personal information and/or server's internal information via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-m6vm-h793-p5rc GHSA-m6vm-h793-p5rc 2026-10-18T12:47:52.681730+00:00

Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to read the user's personal information and/or server's internal information via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2021-20670 gsd-2021-20670 2026-10-18T12:47:52.681746+00:00 gsd-2021-20670 https://cve.radiocsirt.org/vuln/jvndb-2021-001123 jvndb-2021-001123 2026-10-18T12:47:52.681757+00:00

GROWI provided by WESEEK, Inc. contains multiple vulnerabilities listed below. Stored Cross-site Scripting (CWE-79) - CVE-2021-20667 Path Traversal (CWE-22) - CVE-2021-20668 Path Traversal (CWE-22) - CVE-2021-20669 Improper Access Control (CWE-284) - CVE-2021-20670 Improper Input Validation (CWE-20) - CVE-2021-20671 Site Scripting (CWE-79) - CVE-2021-20829 stypr of Flatt Security Inc. reported these vulnerabilities to the developer and coordinated on his own. After coordination was completed, this case was reported to JPCERT/CC, and JPCERT/CC coordinated with the developer for the publication.