https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:08:42 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-31353 EUVD-2026-31353 https://cve.radiocsirt.org/vuln/euvd-2026-31353 https://cve.radiocsirt.org/vuln/fkie_cve-2021-40845 <p>The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory.</p> <p>The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-40845 https://cve.radiocsirt.org/vuln/ghsa-x75m-rrhq-6j68 <p>The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory.</p> <p>The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/index.php. Neither the content nor extension of the uploaded files is checked, allowing execution of PHP code under the /cmd directory.</p> https://cve.radiocsirt.org/vuln/ghsa-x75m-rrhq-6j68 https://cve.radiocsirt.org/vuln/gsd-2021-40845 gsd-2021-40845 https://cve.radiocsirt.org/vuln/gsd-2021-40845