Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 12:37:11 +0000 cnvd-2015-07298 https://cve.radiocsirt.org/vuln/cnvd-2015-07298 cnvd-2015-07298 https://cve.radiocsirt.org/vuln/cnvd-2015-07298 EUVD-2026-93603 https://cve.radiocsirt.org/vuln/euvd-2026-93603 EUVD-2026-93603 https://cve.radiocsirt.org/vuln/euvd-2026-93603 fkie_cve-2015-5665 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5665 <p>Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hijack the authentication of arbitrary users for requests that write to PHP scripts, related to the doValidToken function.</p> <p>Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hijack the authentication of arbitrary users for requests that write to PHP scripts, related to the doValidToken function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-5665 GHSA-67pf-xxrr-g98v https://cve.radiocsirt.org/vuln/ghsa-67pf-xxrr-g98v <p>Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hijack the authentication of arbitrary users for requests that write to PHP scripts, related to the doValidToken function.</p> <p>Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hijack the authentication of arbitrary users for requests that write to PHP scripts, related to the doValidToken function.</p> https://cve.radiocsirt.org/vuln/ghsa-67pf-xxrr-g98v gsd-2015-5665 https://cve.radiocsirt.org/vuln/gsd-2015-5665 gsd-2015-5665 https://cve.radiocsirt.org/vuln/gsd-2015-5665 jvndb-2015-000166 https://cve.radiocsirt.org/vuln/jvndb-2015-000166 <p>EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site request forgery vulnerability (CWE-352). Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site request forgery vulnerability (CWE-352). Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2015-000166