https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:03:47.425013+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-233125 EUVD-2026-233125 2026-10-09T12:03:47.508899+00:00 EUVD-2026-233125 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45113 fkie_cve-2022-45113 2026-10-09T12:03:47.508934+00:00

Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to access a specially crafted URL may allow a remote unauthenticated attacker to set a specially crafted URL to the Reset Password page and conduct a phishing attack. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier.

 https://cve.radiocsirt.org/vuln/ghsa-8fc9-94c7-j435 GHSA-8fc9-94c7-j435 2026-10-09T12:03:47.508967+00:00

Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to access a specially crafted URL may allow a remote unauthenticated attacker to set a specially crafted URL to the Reset Password page and conduct a phishing attack. Affected products/versions are as follows: Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 and earlier (Movable Type Advanced 7 Series), Movable Type 6.8.7 and earlier (Movable Type 6 Series), Movable Type Advanced 6.8.7 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.53 and earlier, and Movable Type Premium Advanced 1.53 and earlier.

 https://cve.radiocsirt.org/vuln/gsd-2022-45113 gsd-2022-45113 2026-10-09T12:03:47.508987+00:00 gsd-2022-45113 https://cve.radiocsirt.org/vuln/jvndb-2022-000090 jvndb-2022-000090 2026-10-09T12:03:47.508999+00:00

Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below. * Improper Validation of Syntactic Correctness of Input (CWE-1286) - CVE-2022-45113 * Cross-site Scripting (CWE-79) - CVE-2022-45122 * Improper Neutralization of Server-Side Includes (SSI) Within a Web Page (CWE-97) - CVE-2022-4366 CVE-2022-45113, CVE-2022-45122 SHIGA TAKUMA of BroadBand Security, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2022-43660 Six Apart Ltd. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.