https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 14:20:33 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-240086 EUVD-2026-240086 https://cve.radiocsirt.org/vuln/euvd-2026-240086 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41429 <p>a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user&#39;s session.</p> <p>a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user&#39;s session.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-41429 https://cve.radiocsirt.org/vuln/ghsa-rhvh-rq83-g5w7 <p>a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user&#39;s session.</p> <p>a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user&#39;s session.</p> https://cve.radiocsirt.org/vuln/ghsa-rhvh-rq83-g5w7 https://cve.radiocsirt.org/vuln/jvndb-2025-005050 <p>a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;Path traversal (CWE-22)&lt;/li&gt; &lt;ul&gt; &lt;li&gt;CVE-2025-27566&lt;/li&gt; &lt;li&gt;This is an issue with insufficient path validation in the backup feature, and exploitation requires the administrator privilege&lt;/li&gt; &lt;/ul&gt; &lt;li&gt;Cross-site scripting (CWE-79)&lt;/li&gt; &lt;ul&gt; &lt;li&gt;CVE-2025-32999&lt;/li&gt; &lt;li&gt;This issue exists in a specific field in the entry editing screen, and exploitation requires contributor or higher level privileges&lt;/li&gt; &lt;/ul&gt; &lt;li&gt;Server-side request forgery (CWE-918)&lt;/li&gt; &lt;ul&gt;&lt;li&gt;CVE-2025-36560&lt;/li&gt;&lt;/ul&gt; &lt;li&gt;Improper output neutralization for logs (CWE-117)&lt;/li&gt; &lt;ul&gt;&lt;li&gt;CVE-2025-41429&lt;/li&gt;&lt;/ul&gt; CVE-2025-27566, CVE-2025-32999 haidv35 (Dinh Viet Hai) reported these vulnerabilities to the developer and coordinated. After the coordination was completed, haidv35 (Dinh Viet Hai) reported the case to JPCERT/CC to notify users of the solution through JVN. CVE-2025-36560, CVE-2025-41429 vcth4nh from VCSLab of Viettel Cyber Security (Vu Chi Thanh) reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.</p> <p>a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. &lt;ul&gt; &lt;li&gt;Path traversal (CWE-22)&lt;/li&gt; &lt;ul&gt; &lt;li&gt;CVE-2025-27566&lt;/li&gt; &lt;li&gt;This is an issue with insufficient path validation in the backup feature, and exploitation requires the administrator privilege&lt;/li&gt; &lt;/ul&gt; &lt;li&gt;Cross-site scripting (CWE-79)&lt;/li&gt; &lt;ul&gt; &lt;li&gt;CVE-2025-32999&lt;/li&gt; &lt;li&gt;This issue exists in a specific field in the entry editing screen, and exploitation requires contributor or higher level privileges&lt;/li&gt; &lt;/ul&gt; &lt;li&gt;Server-side request forgery (CWE-918)&lt;/li&gt; &lt;ul&gt;&lt;li&gt;CVE-2025-36560&lt;/li&gt;&lt;/ul&gt; &lt;li&gt;Improper output neutralization for logs (CWE-117)&lt;/li&gt; &lt;ul&gt;&lt;li&gt;CVE-2025-41429&lt;/li&gt;&lt;/ul&gt; CVE-2025-27566, CVE-2025-32999 haidv35 (Dinh Viet Hai) reported these vulnerabilities to the developer and coordinated. After the coordination was completed, haidv35 (Dinh Viet Hai) reported the case to JPCERT/CC to notify users of the solution through JVN. CVE-2025-36560, CVE-2025-41429 vcth4nh from VCSLab of Viettel Cyber Security (Vu Chi Thanh) reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.</p> https://cve.radiocsirt.org/vuln/jvndb-2025-005050