https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:18:41.512694+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-22645 cnvd-2022-22645 2026-10-09T05:18:41.518466+00:00 cnvd-2022-22645 https://cve.radiocsirt.org/vuln/euvd-2026-21900 EUVD-2026-21900 2026-10-09T05:18:41.518513+00:00 EUVD-2026-21900 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20837 fkie_cve-2021-20837 2026-10-09T05:18:41.518534+00:00

Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and earlier (Movable Type Advanced 7 Series), Movable Type Advanced 6.8.2 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.46 and earlier, and Movable Type Premium Advanced 1.46 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-fq4q-8q83-6gj7 GHSA-fq4q-8q83-6gj7 2026-10-09T05:18:41.518594+00:00

Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and earlier (Movable Type Advanced 7 Series), Movable Type Advanced 6.8.2 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.46 and earlier, and Movable Type Premium Advanced 1.46 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2021-20837 gsd-2021-20837 2026-10-09T05:18:41.518615+00:00 gsd-2021-20837 https://cve.radiocsirt.org/vuln/jvndb-2021-000093 jvndb-2021-000093 2026-10-09T05:18:41.518627+00:00

Movable Type XMLRPC API provided by Six Apart Ltd. contains an OS command injection vulnerability (CWE-78). Sending a specially crafted message by POST method to Movavle Type XMLRPC API may allow arbitrary OS command execution. [Updated on 2021 November 10] As of 2021 November 10, a Proof-of-Concept (PoC) code exploitning this vulnerability has already been made public and attacks exploting this vulnerability has been observed in the wild. Étienne Gervais, Charl-Alexandre Le Brun and Chatwork Co., Ltd. reported this vulnerability to Six Apart Ltd. and coordinated. Six Apart Ltd. reported this vulnerability to JPCERT/CC to notify users of the solution through JVN.