https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 08:33:21 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-242539 EUVD-2026-242539 https://cve.radiocsirt.org/vuln/euvd-2026-242539 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41428 <p>Improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker.</p> <p>Improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-41428 https://cve.radiocsirt.org/vuln/ghsa-f9j8-jh89-c96f <p>Improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker.</p> <p>Improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker.</p> https://cve.radiocsirt.org/vuln/ghsa-f9j8-jh89-c96f https://cve.radiocsirt.org/vuln/jvndb-2025-000036 <p>The web server module of TimeWorks provided by Keiyo System Co., LTD contains the following vulnerability. &lt;ul&gt;&lt;li&gt;Path traversal (CWE-22) - CVE-2025-41428&lt;/li&gt;&lt;/ul&gt; Masamu Asato of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>The web server module of TimeWorks provided by Keiyo System Co., LTD contains the following vulnerability. &lt;ul&gt;&lt;li&gt;Path traversal (CWE-22) - CVE-2025-41428&lt;/li&gt;&lt;/ul&gt; Masamu Asato of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2025-000036