https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 02:31:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-15187 EUVD-2026-15187 https://cve.radiocsirt.org/vuln/euvd-2026-15187 https://cve.radiocsirt.org/vuln/fkie_cve-2022-27174 <p>Cross-site request forgery (CSRF) vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page.</p> <p>Cross-site request forgery (CSRF) vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-27174 https://cve.radiocsirt.org/vuln/ghsa-v77w-mgq7-vjj2 <p>Cross-site request forgery (CSRF) vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page.</p> <p>Cross-site request forgery (CSRF) vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page.</p> https://cve.radiocsirt.org/vuln/ghsa-v77w-mgq7-vjj2 https://cve.radiocsirt.org/vuln/gsd-2022-27174 gsd-2022-27174 https://cve.radiocsirt.org/vuln/gsd-2022-27174 https://cve.radiocsirt.org/vuln/jvndb-2022-000034 <p>EC-CUBE plugin &#34;Easy Blog for EC-CUBE4&#34; provided by COREMOBILE Co. Ltd. contains a cross-site request forgery vulnerability (CWE-352). Furukawa Natsumi of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>EC-CUBE plugin &#34;Easy Blog for EC-CUBE4&#34; provided by COREMOBILE Co. Ltd. contains a cross-site request forgery vulnerability (CWE-352). Furukawa Natsumi of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2022-000034