https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 17:49:17 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-03881 cnvd-2015-03881 https://cve.radiocsirt.org/vuln/cnvd-2015-03881 https://cve.radiocsirt.org/vuln/euvd-2026-91495 EUVD-2026-91495 https://cve.radiocsirt.org/vuln/euvd-2026-91495 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2952 <p>The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote authenticated users to bypass intended access restrictions and modify administrative credentials via unspecified vectors, a different vulnerability than CVE-2015-2953 and CVE-2015-2958.</p> <p>The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote authenticated users to bypass intended access restrictions and modify administrative credentials via unspecified vectors, a different vulnerability than CVE-2015-2953 and CVE-2015-2958.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-2952 https://cve.radiocsirt.org/vuln/ghsa-h77g-982g-3xg3 <p>The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote authenticated users to bypass intended access restrictions and modify administrative credentials via unspecified vectors, a different vulnerability than CVE-2015-2953 and CVE-2015-2958.</p> <p>The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote authenticated users to bypass intended access restrictions and modify administrative credentials via unspecified vectors, a different vulnerability than CVE-2015-2953 and CVE-2015-2958.</p> https://cve.radiocsirt.org/vuln/ghsa-h77g-982g-3xg3 https://cve.radiocsirt.org/vuln/gsd-2015-2952 gsd-2015-2952 https://cve.radiocsirt.org/vuln/gsd-2015-2952 https://cve.radiocsirt.org/vuln/jvndb-2015-000077 <p>MilkyStep provided by Igreks Inc. is a CGI for e-mail newsletter distribution management. MilkyStep fails to restrict access permissions against the management function for user information (CWE-284). Note that this vulnerability is different from JVN#16409640 or JVN#74280258. Kusano Kazuhiko reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>MilkyStep provided by Igreks Inc. is a CGI for e-mail newsletter distribution management. MilkyStep fails to restrict access permissions against the management function for user information (CWE-284). Note that this vulnerability is different from JVN#16409640 or JVN#74280258. Kusano Kazuhiko reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2015-000077