https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T08:33:36.184914+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-199934 EUVD-2026-199934 2026-10-18T08:33:36.188176+00:00 EUVD-2026-199934 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39933 fkie_cve-2023-39933 2026-10-18T08:33:36.188209+00:00

Insufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload files through the product may execute an arbitrary executable file with the web server's execution privilege.

 https://cve.radiocsirt.org/vuln/ghsa-qgvx-mvf3-xw8r GHSA-qgvx-mvf3-xw8r 2026-10-18T08:33:36.188241+00:00

Insufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, a user who can upload files through the product may execute an arbitrary executable file with the web server's execution privilege.

 https://cve.radiocsirt.org/vuln/gsd-2023-39933 gsd-2023-39933 2026-10-18T08:33:36.188259+00:00 gsd-2023-39933 https://cve.radiocsirt.org/vuln/jvndb-2023-000090 jvndb-2023-000090 2026-10-18T08:33:36.188270+00:00

CGIs included with PMailServer and PMailServer2 provided by A.K.I Software contain multiple vulnerabilities listed below. * Stored cross-site scripting vulnerability (CWE-79) - CVE-2023-39223 * Insufficient verification vulnerability in Broadcast Mail CGI (pmc.exe) (CWE-434) - CVE-2023-39933 * Directory traversal vulnerability in Mailing List Search CGI (pmmls.exe) (CWE-22) - CVE-2023-40160 * Directory traversal vulnerability in Internal Simple Webserver (CWE-22) - CVE-2023-40747 CVE-2023-39223, CVE-2023-39933, CVE-2023-40160 Shuji Shimizu of VeriServe Corporation reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-40747 Shunta Nakanishi of VeriServe Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.