https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:46:00 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-15276 cnvd-2018-15276 https://cve.radiocsirt.org/vuln/cnvd-2018-15276 https://cve.radiocsirt.org/vuln/euvd-2026-60792 EUVD-2026-60792 https://cve.radiocsirt.org/vuln/euvd-2026-60792 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0571 <p>baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.</p> <p>baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-0571 https://cve.radiocsirt.org/vuln/ghsa-3mcp-6rv6-c69g <p><strong>Affected:</strong> Packagist: baserproject/basercms</p> <p>baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.</p> <p><strong>Affected:</strong> Packagist: baserproject/basercms</p> <p>baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.</p> https://cve.radiocsirt.org/vuln/ghsa-3mcp-6rv6-c69g https://cve.radiocsirt.org/vuln/gsd-2018-0571 gsd-2018-0571 https://cve.radiocsirt.org/vuln/gsd-2018-0571 https://cve.radiocsirt.org/vuln/jvndb-2018-000055 <p>baserCMS provided by baserCMS Users Community is an opensource content management system. baserCMS contains multiple vulnerabilities listed below. *Command injection (CWE-94) - CVE-2018-0569 *Cross-site scripting (CWE-79) - CVE-2018-0570 *Unrestricted Upload of File with Dangerous Type in upload file management function (CWE-434) - CVE-2018-0571 *Restrict access permissions failure in contents management function (CWE-264) - CVE-2018-0572 *Restrict access permissions failture for a content with a period being public is expired (CWE-264) - CVE-2018-0573 *Cross-site scripting in theme management function (CWE-79) - CVE-2018-0574 *Restrict access permissions failure in the function to attach files in mail form (CWE-264) - CVE-2018-0575 Following researchers reported respective vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning partnership. CVE-2018-0569, CVE-2018-0570, CVE-2018-0571, CVE-2018-0572, and CVE-2018-0573 Toshitsugu Yoneyama and Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. CVE-2018-0574 and CVE-2018-0575 Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc.</p> <p>baserCMS provided by baserCMS Users Community is an opensource content management system. baserCMS contains multiple vulnerabilities listed below. *Command injection (CWE-94) - CVE-2018-0569 *Cross-site scripting (CWE-79) - CVE-2018-0570 *Unrestricted Upload of File with Dangerous Type in upload file management function (CWE-434) - CVE-2018-0571 *Restrict access permissions failure in contents management function (CWE-264) - CVE-2018-0572 *Restrict access permissions failture for a content with a period being public is expired (CWE-264) - CVE-2018-0573 *Cross-site scripting in theme management function (CWE-79) - CVE-2018-0574 *Restrict access permissions failure in the function to attach files in mail form (CWE-264) - CVE-2018-0575 Following researchers reported respective vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning partnership. CVE-2018-0569, CVE-2018-0570, CVE-2018-0571, CVE-2018-0572, and CVE-2018-0573 Toshitsugu Yoneyama and Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. CVE-2018-0574 and CVE-2018-0575 Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc.</p> https://cve.radiocsirt.org/vuln/jvndb-2018-000055