https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T16:43:59.592705+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-159258 EUVD-2026-159258 2026-10-24T16:43:59.595867+00:00 EUVD-2026-159258 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25831 fkie_cve-2024-25831 2026-10-24T16:43:59.595899+00:00

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management interface.

 https://cve.radiocsirt.org/vuln/ghsa-gw2f-jv86-5xc3 GHSA-gw2f-jv86-5xc3 2026-10-24T16:43:59.595929+00:00

F-logic DataCube3 Version 1.0 is affected by a reflected cross-site scripting (XSS) vulnerability due to improper input sanitization. An authenticated, remote attacker can execute arbitrary JavaScript code in the web management interface.

 https://cve.radiocsirt.org/vuln/gsd-2024-25831 gsd-2024-25831 2026-10-24T16:43:59.595946+00:00 gsd-2024-25831 https://cve.radiocsirt.org/vuln/jvndb-2024-003187 jvndb-2024-003187 2026-10-24T16:43:59.595958+00:00

DataCube provided by Field Logic Inc. contains multiple vulnerabilities listed below. * Direct Request ('Forced Browsing') (CWE-425) - CVE-2024-25830 * Reflected cross-site scripting (CWE-79) - CVE-2024-25831 * Unrestricted upload of file with dangerous type (CWE-434) - CVE-2024-25832 * SQL injection (CWE-89) - CVE-2024-25833 CVE-2024-25830, CVE-2024-25831, CVE-2024-25832, CVE-2024-25833 Thomas J. Knudsen and Samy Younsi of NeroTeam Security Labs reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. CVE-2024-25832 CV3TR4CK reported this vulnerability to JPCERT/CC during the coordination based on the above report.