https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T15:14:29.761613+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-21786 EUVD-2026-21786 2026-10-20T15:14:29.764764+00:00 EUVD-2026-21786 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20715 fkie_cve-2021-20715 2026-10-20T15:14:29.764796+00:00

Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.

 https://cve.radiocsirt.org/vuln/ghsa-h9hq-cmw2-pxgh GHSA-h9hq-cmw2-pxgh 2026-10-20T15:14:29.764826+00:00

Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.

 https://cve.radiocsirt.org/vuln/gsd-2021-20715 gsd-2021-20715 2026-10-20T15:14:29.764842+00:00 gsd-2021-20715 https://cve.radiocsirt.org/vuln/jvndb-2021-000033 jvndb-2021-000033 2026-10-20T15:14:29.764853+00:00

Hot Pepper Gourmet App provided by Recruit Co., Ltd. implements the function to access a requested URL using Custom URL Scheme. This function contains an improper access control vulnerability (CWE-284) that may allow the vulnerable App to receive an request from an arbitrary App and execute access. Ryo Sato of BroadBand Security,Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.