https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T09:21:53.993901+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-14132 EUVD-2026-14132 2026-10-09T09:21:54.054173+00:00 EUVD-2026-14132 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24374 fkie_cve-2022-24374 2026-10-09T09:21:54.054219+00:00

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. This vulnerability is different from CVE-2022-23916.

 https://cve.radiocsirt.org/vuln/ghsa-g667-p784-m7j2 GHSA-g667-p784-m7j2 2026-10-09T09:21:54.054253+00:00

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. This vulnerability is different from CVE-2022-23916.

 https://cve.radiocsirt.org/vuln/gsd-2022-24374 gsd-2022-24374 2026-10-09T09:21:54.054271+00:00 gsd-2022-24374 https://cve.radiocsirt.org/vuln/jvndb-2022-000014 jvndb-2022-000014 2026-10-09T09:21:54.054282+00:00

a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. * Cross-site scripting (CWE-79) - CVE-2022-24374 * Cross-site scripting (CWE-79) - CVE-2022-23916 * Template injection (CWE-1336) - CVE-2022-23810 * Authentication bypass (CWE-291) - CVE-2022-21142 CVE-2022-24374 iwama yuu of Secure Sky Technology Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2022-23916 Masashi Yamane of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2022-23810, CVE-2022-21142 hibiki moriyama of STNet, Incorporated reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.