https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:31:09.770366+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-241581 EUVD-2026-241581 2026-10-06T22:31:09.774652+00:00 EUVD-2026-241581 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45210 fkie_cve-2023-45210 2026-10-06T22:31:09.774689+00:00

Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticated attacker to view the temporary files uploaded by other users who are not permitted to access.

 https://cve.radiocsirt.org/vuln/ghsa-wj8f-78wg-52vw GHSA-wj8f-78wg-52vw 2026-10-06T22:31:09.774720+00:00

Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticated attacker to view the temporary files uploaded by other users who are not permitted to access.

 https://cve.radiocsirt.org/vuln/gsd-2023-45210 gsd-2023-45210 2026-10-06T22:31:09.774736+00:00 gsd-2023-45210 https://cve.radiocsirt.org/vuln/jvndb-2023-000112 jvndb-2023-000112 2026-10-06T22:31:09.774748+00:00

Pleasanter provided by Implem Inc. contains multiple vulnerabilities listed below. <ul><li>Stored cross-site scripting vulnerability (CWE-79) - CVE-2023-34439</li><li>Improper access control vulnerability (CWE-284) - CVE-2023-45210</li><li>Open redirect vulnerability (CWE-601) - CVE-2023-46688</li><li>Authentication bypass vulnerability by SAML (CWE-289) - CVE-2023-41890</li></ul> CVE-2023-41890 This issue is caused by a vulnerability in Sustainsys.Saml2 library used in the product. CVE-2023-34439,CVE-2023-45210 Sato Nobuhiro of Suzuki Motor Corporation and You Okuma of LAC Co., Ltd. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-46688 Yoichi Tsuzuki of FFRI Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Implem Inc. reported to IPA that CVE-2023-41890 vulnerability still exists in the product. JPCERT/CC coordinated with the developer.