https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:52:21.923333+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-4949 EUVD-2026-4949 2026-10-02T23:52:21.926464+00:00 EUVD-2026-4949 https://cve.radiocsirt.org/vuln/fkie_cve-2024-31396 fkie_cve-2024-31396 2026-10-02T23:52:21.926495+00:00

Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.

 https://cve.radiocsirt.org/vuln/ghsa-chxf-xv64-xxfr GHSA-chxf-xv64-xxfr 2026-10-02T23:52:21.926525+00:00

Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.

 https://cve.radiocsirt.org/vuln/gsd-2024-31396 gsd-2024-31396 2026-10-02T23:52:21.926542+00:00 gsd-2024-31396 https://cve.radiocsirt.org/vuln/jvndb-2024-000039 jvndb-2024-000039 2026-10-02T23:52:21.926554+00:00

a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. * Stored cross-site scripting vulnerability in Entry editing pages (CWE-79) - CVE-2024-30419 * Server-side request forgery (CWE-918) - CVE-2024-30420 * Directory traversal (CWE-22) - CVE-2024-31394 * Stored cross-site scripting vulnerability in Schedule labeling pages (CWE-79) - CVE-2024-31395 * Code injection (CWE-94) - CVE-2024-31396 Rikuto Tauchi of sangi reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.