https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:51:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-4949 EUVD-2026-4949 https://cve.radiocsirt.org/vuln/euvd-2026-4949 https://cve.radiocsirt.org/vuln/fkie_cve-2024-31396 <p>Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.</p> <p>Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-31396 https://cve.radiocsirt.org/vuln/ghsa-chxf-xv64-xxfr <p>Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.</p> <p>Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the product may execute an arbitrary command on the server.</p> https://cve.radiocsirt.org/vuln/ghsa-chxf-xv64-xxfr https://cve.radiocsirt.org/vuln/gsd-2024-31396 gsd-2024-31396 https://cve.radiocsirt.org/vuln/gsd-2024-31396 https://cve.radiocsirt.org/vuln/jvndb-2024-000039 <p>a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. * Stored cross-site scripting vulnerability in Entry editing pages (CWE-79) - CVE-2024-30419 * Server-side request forgery (CWE-918) - CVE-2024-30420 * Directory traversal (CWE-22) - CVE-2024-31394 * Stored cross-site scripting vulnerability in Schedule labeling pages (CWE-79) - CVE-2024-31395 * Code injection (CWE-94) - CVE-2024-31396 Rikuto Tauchi of sangi reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. * Stored cross-site scripting vulnerability in Entry editing pages (CWE-79) - CVE-2024-30419 * Server-side request forgery (CWE-918) - CVE-2024-30420 * Directory traversal (CWE-22) - CVE-2024-31394 * Stored cross-site scripting vulnerability in Schedule labeling pages (CWE-79) - CVE-2024-31395 * Code injection (CWE-94) - CVE-2024-31396 Rikuto Tauchi of sangi reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2024-000039