https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 06:35:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-54844 EUVD-2026-54844 https://cve.radiocsirt.org/vuln/euvd-2026-54844 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12150 <p>Karamasoft UltimateEditor 1 does not ensure that an uploaded file is an image or document (neither file types nor extensions are restricted). The attacker must use the Attach icon to perform an upload. An uploaded file is accessible under the UltimateEditorInclude/UserFiles/ URI.</p> <p>Karamasoft UltimateEditor 1 does not ensure that an uploaded file is an image or document (neither file types nor extensions are restricted). The attacker must use the Attach icon to perform an upload. An uploaded file is accessible under the UltimateEditorInclude/UserFiles/ URI.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-12150 https://cve.radiocsirt.org/vuln/ghsa-qf2m-h28q-74r5 <p>Karamasoft UltimateEditor 1 does not ensure that an uploaded file is an image or document (neither file types nor extensions are restricted). The attacker must use the Attach icon to perform an upload. An uploaded file is accessible under the UltimateEditorInclude/UserFiles/ URI.</p> <p>Karamasoft UltimateEditor 1 does not ensure that an uploaded file is an image or document (neither file types nor extensions are restricted). The attacker must use the Attach icon to perform an upload. An uploaded file is accessible under the UltimateEditorInclude/UserFiles/ URI.</p> https://cve.radiocsirt.org/vuln/ghsa-qf2m-h28q-74r5 https://cve.radiocsirt.org/vuln/gsd-2019-12150 gsd-2019-12150 https://cve.radiocsirt.org/vuln/gsd-2019-12150