https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:40:16.079585+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-23790 cnvd-2021-23790 2026-10-02T18:40:16.274957+00:00 cnvd-2021-23790 https://cve.radiocsirt.org/vuln/euvd-2026-21707 EUVD-2026-21707 2026-10-02T18:40:16.274997+00:00 EUVD-2026-21707 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20682 fkie_cve-2021-20682 2026-10-02T18:40:16.275012+00:00

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-g39q-f4rm-85x4 GHSA-g39q-f4rm-85x4 — OS Command Injection in baserCMS 2026-10-02T18:40:16.275042+00:00

Affected: Packagist: baserproject/basercms

baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via upload of malicious plugins.

 https://cve.radiocsirt.org/vuln/gsd-2021-20682 gsd-2021-20682 2026-10-02T18:40:16.275067+00:00 gsd-2021-20682 https://cve.radiocsirt.org/vuln/jvndb-2021-000027 jvndb-2021-000027 2026-10-02T18:40:16.275079+00:00

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. *Improper Neutralization of JavaScript input in the page editing function (CWE-79) - CVE-2021-20681 *OS command injection (CWE-78) - CVE-2021-20682 *Improper Neutralization of JavaScript input in the blog article editing function (CWE-79) - CVE-2021-20683 CVE-2021-20681, CVE-2021-20682 Sho Odagiri of Information Science College reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20683 Yamaguchi Kakeru reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.