https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T02:39:19.221970+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-242052 EUVD-2026-242052 2026-10-05T02:39:19.288440+00:00 EUVD-2026-242052 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23348 fkie_cve-2024-23348 2026-10-05T02:39:19.288474+00:00

Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to execute arbitrary JavaScript code by uploading a specially crafted SVG file.

 https://cve.radiocsirt.org/vuln/ghsa-6253-5q75-wc4w GHSA-6253-5q75-wc4w 2026-10-05T02:39:19.288505+00:00

Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to execute arbitrary JavaScript code by uploading a specially crafted SVG file.

 https://cve.radiocsirt.org/vuln/gsd-2024-23348 gsd-2024-23348 2026-10-05T02:39:19.288537+00:00 gsd-2024-23348 https://cve.radiocsirt.org/vuln/jvndb-2024-000011 jvndb-2024-000011 2026-10-05T02:39:19.288554+00:00

a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below.<ul><li>Improper input validation (CWE-20) - CVE-2024-23180</li><li>Cross-site scripting (CWE-79) - CVE-2024-23181</li><li>Relative path traversal (CWE-23) - CVE-2024-23182</li><li>Cross-site scripting (CWE-79) - CVE-2024-23183</li><li>Improper input validation (CWE-20) - CVE-2024-23348</li><li>Cross-site scripting (CWE-79) - CVE-2024-23782</li></ul> CVE-2024-23180 Naoya Miyaguchi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-23181 Kentaro Ishii of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-23182, CVE-2024-23183 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-23348, CVE-2024-23782 Yuta Morioka of Information Science College reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.