https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T05:08:07.630523+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225839 EUVD-2026-225839 2026-10-18T05:08:07.634057+00:00 EUVD-2026-225839 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39223 fkie_cve-2023-39223 2026-10-18T05:08:07.634097+00:00

Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

 https://cve.radiocsirt.org/vuln/ghsa-3f88-vcg8-m5ph GHSA-3f88-vcg8-m5ph 2026-10-18T05:08:07.634138+00:00

Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser.

 https://cve.radiocsirt.org/vuln/gsd-2023-39223 gsd-2023-39223 2026-10-18T05:08:07.634164+00:00 gsd-2023-39223 https://cve.radiocsirt.org/vuln/jvndb-2023-000090 jvndb-2023-000090 2026-10-18T05:08:07.634180+00:00

CGIs included with PMailServer and PMailServer2 provided by A.K.I Software contain multiple vulnerabilities listed below. * Stored cross-site scripting vulnerability (CWE-79) - CVE-2023-39223 * Insufficient verification vulnerability in Broadcast Mail CGI (pmc.exe) (CWE-434) - CVE-2023-39933 * Directory traversal vulnerability in Mailing List Search CGI (pmmls.exe) (CWE-22) - CVE-2023-40160 * Directory traversal vulnerability in Internal Simple Webserver (CWE-22) - CVE-2023-40747 CVE-2023-39223, CVE-2023-39933, CVE-2023-40160 Shuji Shimizu of VeriServe Corporation reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-40747 Shunta Nakanishi of VeriServe Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.