https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:04:04.871523+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-05264 bdu:2023-05264 2026-10-09T12:04:04.875268+00:00 bdu:2023-05264 https://cve.radiocsirt.org/vuln/cnvd-2022-21233 cnvd-2022-21233 2026-10-09T12:04:04.875300+00:00 cnvd-2022-21233 https://cve.radiocsirt.org/vuln/euvd-2026-14297 EUVD-2026-14297 2026-10-09T12:04:04.875315+00:00 EUVD-2026-14297 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24977 fkie_cve-2022-24977 2026-10-09T12:04:04.875326+00:00

ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to unsafe interaction with the CKEditor processImage.php script. The payload may be placed in PHP_SESSION_UPLOAD_PROGRESS when the PHP installation supports upload_progress.

 https://cve.radiocsirt.org/vuln/ghsa-389p-fchr-q2mg GHSA-389p-fchr-q2mg — Path Traversal in ImpressCMS 2026-10-09T12:04:04.875353+00:00

Affected: Packagist: impresscms/impresscms

ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to unsafe interaction with the CKEditor processImage.php script. The payload may be placed in PHP_SESSION_UPLOAD_PROGRESS when the PHP installation supports upload_progress.

 https://cve.radiocsirt.org/vuln/gsd-2022-24977 gsd-2022-24977 2026-10-09T12:04:04.875375+00:00 gsd-2022-24977