https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T06:02:30.069125+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-223421 EUVD-2026-223421 2026-10-18T06:02:30.072521+00:00 EUVD-2026-223421 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40747 fkie_cve-2023-40747 2026-10-18T06:02:30.072554+00:00

Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may access arbitrary files outside DocumentRoot.

 https://cve.radiocsirt.org/vuln/ghsa-vgqq-j658-qpcx GHSA-vgqq-j658-qpcx 2026-10-18T06:02:30.072586+00:00

Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. If this vulnerability is exploited, a remote attacker may access arbitrary files outside DocumentRoot.

 https://cve.radiocsirt.org/vuln/gsd-2023-40747 gsd-2023-40747 2026-10-18T06:02:30.072603+00:00 gsd-2023-40747 https://cve.radiocsirt.org/vuln/jvndb-2023-000090 jvndb-2023-000090 2026-10-18T06:02:30.072614+00:00

CGIs included with PMailServer and PMailServer2 provided by A.K.I Software contain multiple vulnerabilities listed below. * Stored cross-site scripting vulnerability (CWE-79) - CVE-2023-39223 * Insufficient verification vulnerability in Broadcast Mail CGI (pmc.exe) (CWE-434) - CVE-2023-39933 * Directory traversal vulnerability in Mailing List Search CGI (pmmls.exe) (CWE-22) - CVE-2023-40160 * Directory traversal vulnerability in Internal Simple Webserver (CWE-22) - CVE-2023-40747 CVE-2023-39223, CVE-2023-39933, CVE-2023-40160 Shuji Shimizu of VeriServe Corporation reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-40747 Shunta Nakanishi of VeriServe Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.