https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T15:01:21.332951+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-02846 cnvd-2015-02846 2026-10-16T15:01:21.336295+00:00 cnvd-2015-02846 https://cve.radiocsirt.org/vuln/euvd-2026-90207 EUVD-2026-90207 2026-10-16T15:01:21.336366+00:00 EUVD-2026-90207 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1399 fkie_cve-2015-1399 2026-10-16T15:01:21.336381+00:00

PHP remote file inclusion vulnerability in the fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allows remote administrators to execute arbitrary PHP code via a URL in unspecified vectors involving the setScriptPath function. NOTE: it is not clear whether this issue crosses privilege boundaries, since administrators might already have privileges to include arbitrary files.

 https://cve.radiocsirt.org/vuln/ghsa-rg38-827x-4q2g GHSA-rg38-827x-4q2g 2026-10-16T15:01:21.336409+00:00

PHP remote file inclusion vulnerability in the fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allows remote administrators to execute arbitrary PHP code via a URL in unspecified vectors involving the setScriptPath function. NOTE: it is not clear whether this issue crosses privilege boundaries, since administrators might already have privileges to include arbitrary files.

 https://cve.radiocsirt.org/vuln/gsd-2015-1399 gsd-2015-1399 2026-10-16T15:01:21.336427+00:00 gsd-2015-1399