https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T19:43:02.823390+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-92463 cnvd-2021-92463 2026-10-05T19:43:02.827182+00:00 cnvd-2021-92463 https://cve.radiocsirt.org/vuln/euvd-2026-31629 EUVD-2026-31629 2026-10-05T19:43:02.827318+00:00 EUVD-2026-31629 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41279 fkie_cve-2021-41279 2026-10-05T19:43:02.827334+00:00

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions users with upload privilege may upload crafted zip files capable of path traversal on the host operating system. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.

 https://cve.radiocsirt.org/vuln/ghsa-4x2f-54wr-4hjg GHSA-4x2f-54wr-4hjg — Potential Zip Slip Vulnerability in baserCMS 2026-10-05T19:43:02.827379+00:00

Affected: Packagist: baserproject/basercms

There is a OS Command Injection Vulnerability on the management system of baserCMS.

This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible.

Target baserCMS 4.5.3 and earlier versions

Vulnerability OS Command Injection Vulnerability.

Countermeasures Update to the latest version of baserCMS

Credits Daniele Scanu @SoterItSecurity

 https://cve.radiocsirt.org/vuln/gsd-2021-41279 gsd-2021-41279 2026-10-05T19:43:02.827408+00:00 gsd-2021-41279 https://cve.radiocsirt.org/vuln/jvndb-2021-000106 jvndb-2021-000106 2026-10-05T19:43:02.827419+00:00

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. * OS command injection (CWE-78) - CVE-2021-41243 * Arbitrary code upload vulnerability in Database restore (CWE-434) - CVE-2021-41279 CVE-2021-41243 Akagi Yusuke of NTT-ME CORPORATION reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-41279 Daniele Scanu of SoterITSecurity reported this vulnerability to baserCMS Users Community and baserCMS Users Community reported it to JPCERT/CC to notify users of the solution through JVN.