https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T19:55:13.333490+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-218068 EUVD-2026-218068 2026-10-15T19:55:13.336241+00:00 EUVD-2026-218068 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25224 fkie_cve-2025-25224 2026-10-15T19:55:13.336270+00:00

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained.

 https://cve.radiocsirt.org/vuln/ghsa-f52p-4vq3-mmgf GHSA-f52p-4vq3-mmgf 2026-10-15T19:55:13.336299+00:00

The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains a missing authentication vulnerability in dloader.php. If this vulnerability is exploited, arbitrary files on a server may be obtained.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000012 jvndb-2025-000012 2026-10-15T19:55:13.336315+00:00

The LuxCal Web Calendar provided by LuxSoft contains multiple vulnerabilities listed below. <ul><li>SQL injection in pdf.php (CWE-89) - CVE-2025-25221</li> <li>SQL injection in retrieve.php (CWE-89) - CVE-2025-25222</li> <li>Path traversal in dloader.php (CWE-22) - CVE-2025-25223</li> <li>Missing authentication in dloader.php (CWE-306) - CVE-2025-25224</li></ul> CVE-2025-25221, CVE-2025-25222 Rikuto Tauchi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2025-25223, CVE-2025-25224 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.