https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T20:15:47.779600+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-03835 cnvd-2015-03835 2026-10-21T20:15:47.783209+00:00 cnvd-2015-03835 https://cve.radiocsirt.org/vuln/euvd-2026-91458 EUVD-2026-91458 2026-10-21T20:15:47.783241+00:00 EUVD-2026-91458 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2958 fkie_cve-2015-2958 2026-10-21T20:15:47.783255+00:00

Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to bypass intended access restrictions and modify settings via unspecified vectors, a different vulnerability than CVE-2015-2952 and CVE-2015-2953.

 https://cve.radiocsirt.org/vuln/ghsa-c39m-92fv-39hm GHSA-c39m-92fv-39hm 2026-10-21T20:15:47.783282+00:00

Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to bypass intended access restrictions and modify settings via unspecified vectors, a different vulnerability than CVE-2015-2952 and CVE-2015-2953.

 https://cve.radiocsirt.org/vuln/gsd-2015-2958 gsd-2015-2958 2026-10-21T20:15:47.783298+00:00 gsd-2015-2958 https://cve.radiocsirt.org/vuln/jvndb-2015-000083 jvndb-2015-000083 2026-10-21T20:15:47.783309+00:00

MilkyStep provided by Igreks Inc. fails to restrict access permissions. Note that this vulnerability is different from JVN#16409640. MilkyStep provided by Igreks Inc. is a CGI for e-mail newsletter distribution management. MilkyStep fails to restrict access permissions (CWE-264). Kusano Kazuhiko reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.