https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T12:57:05.415182+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-221121 EUVD-2026-221121 2026-10-10T12:57:05.418270+00:00 EUVD-2026-221121 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22336 fkie_cve-2023-22336 2026-10-10T12:57:05.418303+00:00

Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.

 https://cve.radiocsirt.org/vuln/ghsa-34gr-jxh4-rxfv GHSA-34gr-jxh4-rxfv 2026-10-10T12:57:05.418335+00:00

Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.

 https://cve.radiocsirt.org/vuln/gsd-2023-22336 gsd-2023-22336 2026-10-10T12:57:05.418353+00:00 gsd-2023-22336 https://cve.radiocsirt.org/vuln/jvndb-2023-000021 jvndb-2023-000021 2026-10-10T12:57:05.418365+00:00

SS1 is asset management software and Rakuraku PC Cloud is cloud-based asset management service. SS1 and Rakuraku PC Cloud Agent contain multiple vulnerabilities listed below. <ul><li>Improper Access Control (CWE-284) - CVE-2023-22335</li><li>Path Traversal (CWE-22) - CVE-2023-22336</li><li>Use of Hard-coded Credentials (CWE-798) - CVE-2023-22344</li></ul> Denis Faiustov, and Ruslan Sayfiev of GMO Cyber Security by IERAE reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.