https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:39:14.788419+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-251254 EUVD-2026-251254 2026-10-07T18:39:14.849876+00:00 EUVD-2026-251254 https://cve.radiocsirt.org/vuln/fkie_cve-2025-52460 fkie_cve-2025-52460 2026-10-07T18:39:14.849915+00:00

Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If exploited, uploaded files and SS1 configuration files may be accessed by a remote unauthenticated attacker.

 https://cve.radiocsirt.org/vuln/ghsa-ch9j-8468-3h2q GHSA-ch9j-8468-3h2q 2026-10-07T18:39:14.849947+00:00

Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If exploited, uploaded files and SS1 configuration files may be accessed by a remote unauthenticated attacker.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000064 jvndb-2025-000064 2026-10-07T18:39:14.849964+00:00

SS1 provided by provided by DOS Co., Ltd. contains multiple vulnerabilities listed below. <ul><li>Inadequate encryption strength (CWE-326) - CVE-2025-46409</li> <li>Files or directories accessible to external parties (CWE-552) - CVE-2025-52460</li> <li>Incorrect permission assignment for critical resource (CWE-732) - CVE-2025-53396</li> <li>Unrestricted upload of file with dangerous type (CWE-434) - CVE-2025-53970, CVE-2025-54762</li> <li>Path traversal (CWE-22) - CVE-2025-54819, CVE-2025-58072</li> <li>Use of hard-coded password (CWE-259) - CVE-2025-58081</li></ul> CVE-2025-46409, CVE-2025-52460, CVE-2025-53970, CVE-2025-54762, CVE-2025-54819 Ruslan Sayfiev, Denis Faiustov and Masahiro Kawada of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2025-53396, CVE-2025-58072, CVE-2025-58081 Masahiro Kawada of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.