https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 00:04:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-245895 EUVD-2026-245895 https://cve.radiocsirt.org/vuln/euvd-2026-245895 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41404 <p>Direct request (&#39;Forced Browsing&#39;) issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-public contents may be viewed by an attacker who can log in to the affected product.</p> <p>Direct request (&#39;Forced Browsing&#39;) issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-public contents may be viewed by an attacker who can log in to the affected product.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-41404 https://cve.radiocsirt.org/vuln/ghsa-gcxj-65c6-wcrg <p>Direct request (&#39;Forced Browsing&#39;) issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-public contents may be viewed by an attacker who can log in to the affected product.</p> <p>Direct request (&#39;Forced Browsing&#39;) issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-public contents may be viewed by an attacker who can log in to the affected product.</p> https://cve.radiocsirt.org/vuln/ghsa-gcxj-65c6-wcrg https://cve.radiocsirt.org/vuln/jvndb-2025-000043 <p>iroha Board provided by iroha Soft Co., Ltd. contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Forced browsing (CWE-425) - CVE-2025-41404&lt;/li&gt; &lt;li&gt;Cross-site request forgery (CWE-352) - CVE-2025-48497&lt;/li&gt;&lt;/ul&gt; Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>iroha Board provided by iroha Soft Co., Ltd. contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Forced browsing (CWE-425) - CVE-2025-41404&lt;/li&gt; &lt;li&gt;Cross-site request forgery (CWE-352) - CVE-2025-48497&lt;/li&gt;&lt;/ul&gt; Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2025-000043