https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T21:15:08.434301+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05541 bdu:2022-05541 2026-10-09T21:15:08.437945+00:00 bdu:2022-05541 https://cve.radiocsirt.org/vuln/euvd-2026-18837 EUVD-2026-18837 2026-10-09T21:15:08.437977+00:00 EUVD-2026-18837 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37333 fkie_cve-2022-37333 2026-10-09T21:15:08.437991+00:00

SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows remote authenticated attackers to execute arbitrary SQL commands.

 https://cve.radiocsirt.org/vuln/ghsa-p74q-2pf8-j5jx GHSA-p74q-2pf8-j5jx — exceedone/exment and exceedone/laravel-admin SQL Injection vulnerability 2026-10-09T21:15:08.438020+00:00

Affected: Packagist: exceedone/exment, Packagist: exceedone/laravel-admin

SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows remote authenticated attackers to execute arbitrary SQL commands.

 https://cve.radiocsirt.org/vuln/gsd-2022-37333 gsd-2022-37333 2026-10-09T21:15:08.438047+00:00 gsd-2022-37333 https://cve.radiocsirt.org/vuln/jvndb-2022-000065 jvndb-2022-000065 2026-10-09T21:15:08.438059+00:00

Exment provided by Kajitori Co.,Ltd contains multiple vulnerabilities listed below. * Reflected cross-site scripting (CWE-79) - CVE-2022-38080 * SQL injection (CWE-89) - CVE-2022-37333 * Stored cross-site scripting (CWE-79) - CVE-2022-38089 CVE-2022-38080, CVE-2022-37333 Hibiki Moriyama of STNet, Incorporated reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2022-38089 Yuya Chudo of N.F.Laboratories Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.