<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-09T18:15:06.890008+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cnvd-2024-29668</id>
    <title>cnvd-2024-29668</title>
    <updated>2026-10-09T18:15:06.921220+00:00</updated>
    <content>cnvd-2024-29668</content>
    <link href="https://cve.radiocsirt.org/vuln/cnvd-2024-29668"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-4950</id>
    <title>EUVD-2026-4950</title>
    <updated>2026-10-09T18:15:06.921273+00:00</updated>
    <content>EUVD-2026-4950</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-4950"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2024-31397</id>
    <title>fkie_cve-2024-31397</title>
    <updated>2026-10-09T18:15:06.921294+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, a user who can log in to the product with the administrative privilege may be able to cause a denial-of-service (DoS) condition.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2024-31397"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-rp47-r8r5-fmgm</id>
    <title>GHSA-rp47-r8r5-fmgm</title>
    <updated>2026-10-09T18:15:06.921346+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, a user who can log in to the product with the administrative privilege may be able to cause a denial-of-service (DoS) condition.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-rp47-r8r5-fmgm"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2024-31397</id>
    <title>gsd-2024-31397</title>
    <updated>2026-10-09T18:15:06.921374+00:00</updated>
    <content>gsd-2024-31397</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2024-31397"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/jvndb-2024-000047</id>
    <title>jvndb-2024-000047</title>
    <updated>2026-10-09T18:15:06.921392+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below.

* [CyVDB-3167] Improper handling of data in Mail (CWE-231) - CVE-2024-31397
* [CyVDB-3221] Improper restriction on the output of some API (CWE-201) - CVE-2024-31398
* [CyVDB-3238] Excessive resource consumption in Mail (CWE-1050) - CVE-2024-31399
* [CyVDB-3439] Cross-site scripting vulnerability in Scheduler (CWE-79) - CVE-2024-31401
* [CyVDB-3441] Improper restriction on some operation in Shared To-Dos (CWE-863) - CVE-2024-31402
* [CyVDB-3402] Information disclosure in Mail (CWE-201) - CVE-2024-31400
* [CyVDB-3151] Improper restriction on browsing and operation in Memo (CWE-863) - CVE-2024-31403
* [CyVDB-3471] Browse restriction bypass in Scheduler (CWE-201) - CVE-2024-31404

CVE-2024-31401
@bttthuan reported this vulnerability to Cybozu, Inc. and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN.

CVE-2024-31403
Yuji Tounai reported this vulnerability to Cybozu, Inc. and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN.

CVE-2024-31397, CVE-2024-31398, CVE-2024-31399, CVE-2024-31400, CVE-2024-31402, CVE-2024-31404
Cybozu, Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/jvndb-2024-000047"/>
  </entry>
</feed>
