https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T14:19:10.591974+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-16346 cnvd-2021-16346 2026-10-18T14:19:10.595236+00:00 cnvd-2021-16346 https://cve.radiocsirt.org/vuln/euvd-2026-21714 EUVD-2026-21714 2026-10-18T14:19:10.595271+00:00 EUVD-2026-21714 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20671 fkie_cve-2021-20671 2026-10-18T14:19:10.595285+00:00

Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code execution.

 https://cve.radiocsirt.org/vuln/ghsa-84w3-v2m2-fj4m GHSA-84w3-v2m2-fj4m 2026-10-18T14:19:10.595313+00:00

Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code execution.

 https://cve.radiocsirt.org/vuln/gsd-2021-20671 gsd-2021-20671 2026-10-18T14:19:10.595329+00:00 gsd-2021-20671 https://cve.radiocsirt.org/vuln/jvndb-2021-001123 jvndb-2021-001123 2026-10-18T14:19:10.595340+00:00

GROWI provided by WESEEK, Inc. contains multiple vulnerabilities listed below. Stored Cross-site Scripting (CWE-79) - CVE-2021-20667 Path Traversal (CWE-22) - CVE-2021-20668 Path Traversal (CWE-22) - CVE-2021-20669 Improper Access Control (CWE-284) - CVE-2021-20670 Improper Input Validation (CWE-20) - CVE-2021-20671 Site Scripting (CWE-79) - CVE-2021-20829 stypr of Flatt Security Inc. reported these vulnerabilities to the developer and coordinated on his own. After coordination was completed, this case was reported to JPCERT/CC, and JPCERT/CC coordinated with the developer for the publication.