https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T21:58:58.964726+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-281209 EUVD-2026-281209 2026-10-12T21:58:58.968145+00:00 EUVD-2026-281209 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27787 fkie_cve-2026-27787 2026-10-12T21:58:58.968176+00:00

Cross-site scripting vulnerability exists in MATCHA SNS 1.3.9 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product.

 https://cve.radiocsirt.org/vuln/ghsa-wm9p-h6hw-5vx8 GHSA-wm9p-h6hw-5vx8 2026-10-12T21:58:58.968208+00:00

Cross-site scripting vulnerability exists in MATCHA SNS 1.3.9 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000052 jvndb-2026-000052 2026-10-12T21:58:58.968225+00:00

MATCHA series provided by ICZ Corporation contains multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/89.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/434.html' target='_blank'></a><ul><li>SQL injection (CWE-89) - CVE-2026-24913</li><li>Cross-site scripting (CWE-79) - CVE-2026-27787</li><li>Unrestricted upload of file with dangerous type(CWE-434) - CVE-2026-33273</li></ul>CVE-2026-24913, CVE-2026-27787 Kenta Chikagawa of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-33273 Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.