https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:14:16.658424+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-06448 bdu:2024-06448 2026-10-03T13:14:16.664259+00:00 bdu:2024-06448 https://cve.radiocsirt.org/vuln/euvd-2026-199448 EUVD-2026-199448 2026-10-03T13:14:16.664294+00:00 EUVD-2026-199448 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36452 fkie_cve-2024-36452 2026-10-03T13:14:16.664308+00:00

Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, unintended operations may be performed when a user views a malicious page while logged in. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.

 https://cve.radiocsirt.org/vuln/ghsa-vmfr-vww2-xr2w GHSA-vmfr-vww2-xr2w 2026-10-03T13:14:16.664337+00:00

Cross-site request forgery vulnerability exists in ajaxterm module of Webmin versions prior to 2.003. If this vulnerability is exploited, unintended operations may be performed when a user views a malicious page while logged in. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.

 https://cve.radiocsirt.org/vuln/jvndb-2024-000059 jvndb-2024-000059 2026-10-03T13:14:16.664353+00:00

Multiple Webmin products contain multiple vulnerabilities listed below. * sysinfo.cgi is vulnerable to cross-site scripting (CWE-79) CVE-2024-36450 * session_login.cgi is vulnerable to cross-site scripting (CWE-79) CVE-2024-36453 * ajaxterm module is vulnerable to improper handling of insufficient permissions or privileges (CWE-280) CVE-2024-36451 * ajaxterm module is vulnerable to cross-site request forgery (CWE-352) CVE-2024-36452 CVE-2024-36450, CVE-2024-36451, CVE-2024-36452 Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-36453 hibiki moriyama of STNet, Incorporated reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1545 WID-SEC-W-2024-1545 — Webmin: Mehrere Schwachstellen 2026-10-03T13:14:16.664375+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Webmin ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und seine Rechte zu erweitern.