https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:23:23.907658+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-261649 EUVD-2026-261649 2026-10-07T17:23:23.959165+00:00 EUVD-2026-261649 https://cve.radiocsirt.org/vuln/fkie_cve-2025-61949 fkie_cve-2025-61949 2026-10-07T17:23:23.959203+00:00

LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who logs in to the product's management page.

 https://cve.radiocsirt.org/vuln/ghsa-5rgf-9775-8772 GHSA-5rgf-9775-8772 2026-10-07T17:23:23.959248+00:00

LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who logs in to the product's management page.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000106 jvndb-2025-000106 2026-10-07T17:23:23.959265+00:00

LogStare Collector provided by LogStare Inc. contains multiple vulnerabilities listed below.<ul><li>Incorrect default permissions for the installation directory (CWE-276) - CVE-2025-58097</li><li>Stored cross-site scripting vulnerability in UserManagement (CWE-79) - CVE-2025-61949</li><li>Incorrect authorization in UserRegistration (CWE-863) - CVE-2025-62189</li><li>Cross-site request forgery (CWE-352) - CVE-2025-62687</li><li>Insertion of sensitive information into sent data (CWE-201) - CVE-2025-64299</li><li>Uncontrolled search path element (CWE-427) - CVE-2025-64695</li></ul> Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.