https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T08:35:48.674036+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-232984 EUVD-2026-232984 2026-10-09T08:35:48.784447+00:00 EUVD-2026-232984 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43660 fkie_cve-2022-43660 2026-10-09T08:35:48.784487+00:00

Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenticated attacker with Privilege of 'Manage of Content Types' may execute an arbitrary Perl script and/or an arbitrary OS command. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier.

 https://cve.radiocsirt.org/vuln/ghsa-j8hc-rq6g-3f96 GHSA-j8hc-rq6g-3f96 2026-10-09T08:35:48.784524+00:00

Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenticated attacker with Privilege of 'Manage of Content Types' may execute an arbitrary Perl script and/or an arbitrary OS command. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier.

 https://cve.radiocsirt.org/vuln/gsd-2022-43660 gsd-2022-43660 2026-10-09T08:35:48.784544+00:00 gsd-2022-43660 https://cve.radiocsirt.org/vuln/jvndb-2022-000090 jvndb-2022-000090 2026-10-09T08:35:48.784556+00:00

Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below. * Improper Validation of Syntactic Correctness of Input (CWE-1286) - CVE-2022-45113 * Cross-site Scripting (CWE-79) - CVE-2022-45122 * Improper Neutralization of Server-Side Includes (SSI) Within a Web Page (CWE-97) - CVE-2022-4366 CVE-2022-45113, CVE-2022-45122 SHIGA TAKUMA of BroadBand Security, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2022-43660 Six Apart Ltd. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.