https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T08:33:22.664875+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-242539 EUVD-2026-242539 2026-10-21T08:33:22.667467+00:00 EUVD-2026-242539 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41428 fkie_cve-2025-41428 2026-10-21T08:33:22.667498+00:00

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker.

 https://cve.radiocsirt.org/vuln/ghsa-f9j8-jh89-c96f GHSA-f9j8-jh89-c96f 2026-10-21T08:33:22.667528+00:00

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000036 jvndb-2025-000036 2026-10-21T08:33:22.667545+00:00

The web server module of TimeWorks provided by Keiyo System Co., LTD contains the following vulnerability. <ul><li>Path traversal (CWE-22) - CVE-2025-41428</li></ul> Masamu Asato of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.