https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:06:36.372185+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-05248 bdu:2024-05248 2026-10-03T10:06:36.376002+00:00 bdu:2024-05248 https://cve.radiocsirt.org/vuln/euvd-2026-5699 EUVD-2026-5699 2026-10-03T10:06:36.376034+00:00 EUVD-2026-5699 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36451 fkie_cve-2024-36451 2026-10-03T10:06:36.376049+00:00

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.

 https://cve.radiocsirt.org/vuln/ghsa-4cjw-fj8x-xj3r GHSA-4cjw-fj8x-xj3r 2026-10-03T10:06:36.376077+00:00

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.

 https://cve.radiocsirt.org/vuln/jvndb-2024-000059 jvndb-2024-000059 2026-10-03T10:06:36.376095+00:00

Multiple Webmin products contain multiple vulnerabilities listed below. * sysinfo.cgi is vulnerable to cross-site scripting (CWE-79) CVE-2024-36450 * session_login.cgi is vulnerable to cross-site scripting (CWE-79) CVE-2024-36453 * ajaxterm module is vulnerable to improper handling of insufficient permissions or privileges (CWE-280) CVE-2024-36451 * ajaxterm module is vulnerable to cross-site request forgery (CWE-352) CVE-2024-36452 CVE-2024-36450, CVE-2024-36451, CVE-2024-36452 Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-36453 hibiki moriyama of STNet, Incorporated reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1545 WID-SEC-W-2024-1545 — Webmin: Mehrere Schwachstellen 2026-10-03T10:06:36.376117+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Webmin ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und seine Rechte zu erweitern.