https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:23:37.274263+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-107671 EUVD-2026-107671 2026-10-09T18:23:37.277469+00:00 EUVD-2026-107671 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4702 fkie_cve-2013-4702 2026-10-09T18:23:37.277501+00:00

Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api/SC_Api_Operation.php in LOCKON EC-CUBE 2.12.0 through 2.12.5 on Windows allow remote attackers to read arbitrary files via vectors involving a (1) Operation, (2) Service, (3) Style, (4) Validate, or (5) Version value.

 https://cve.radiocsirt.org/vuln/ghsa-jfxq-mqxh-332w GHSA-jfxq-mqxh-332w 2026-10-09T18:23:37.277533+00:00

Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api/SC_Api_Operation.php in LOCKON EC-CUBE 2.12.0 through 2.12.5 on Windows allow remote attackers to read arbitrary files via vectors involving a (1) Operation, (2) Service, (3) Style, (4) Validate, or (5) Version value.

 https://cve.radiocsirt.org/vuln/gsd-2013-4702 gsd-2013-4702 2026-10-09T18:23:37.277550+00:00 gsd-2013-4702 https://cve.radiocsirt.org/vuln/jvndb-2013-000081 jvndb-2013-000081 2026-10-09T18:23:37.277561+00:00

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a directory traversal vulnerability when used in Windows. Gen Sato reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.