https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 03:04:28 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-9895 EUVD-2026-9895 https://cve.radiocsirt.org/vuln/euvd-2026-9895 https://cve.radiocsirt.org/vuln/fkie_cve-2023-47283 <p>Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the system.</p> <p>Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-47283 https://cve.radiocsirt.org/vuln/ghsa-28j3-p9v6-r783 <p>Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the system.</p> <p>Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to obtain files in the system.</p> https://cve.radiocsirt.org/vuln/ghsa-28j3-p9v6-r783 https://cve.radiocsirt.org/vuln/gsd-2023-47283 gsd-2023-47283 https://cve.radiocsirt.org/vuln/gsd-2023-47283 https://cve.radiocsirt.org/vuln/jvndb-2023-000118 <p>CubeCart provided by CubeCart Limited contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Cross-site request forgery (CWE-352) - CVE-2023-38130&lt;/li&gt;&lt;li&gt;Directory traversal (CWE-22) - CVE-2023-42428&lt;/li&gt;&lt;li&gt;Directory traversal (CWE-22) - CVE-2023-47283&lt;/li&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2023-47675&lt;/li&gt;&lt;/ul&gt; Gen Sato of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to the developer first, and to IPA later. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>CubeCart provided by CubeCart Limited contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Cross-site request forgery (CWE-352) - CVE-2023-38130&lt;/li&gt;&lt;li&gt;Directory traversal (CWE-22) - CVE-2023-42428&lt;/li&gt;&lt;li&gt;Directory traversal (CWE-22) - CVE-2023-47283&lt;/li&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2023-47675&lt;/li&gt;&lt;/ul&gt; Gen Sato of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to the developer first, and to IPA later. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2023-000118