https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:38:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-251255 EUVD-2026-251255 https://cve.radiocsirt.org/vuln/euvd-2026-251255 https://cve.radiocsirt.org/vuln/fkie_cve-2025-46409 <p>Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker.</p> <p>Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-46409 https://cve.radiocsirt.org/vuln/ghsa-27x2-2gh4-2gpv <p>Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker.</p> <p>Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker.</p> https://cve.radiocsirt.org/vuln/ghsa-27x2-2gh4-2gpv https://cve.radiocsirt.org/vuln/jvndb-2025-000064 <p>SS1 provided by provided by DOS Co., Ltd. contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Inadequate encryption strength (CWE-326) - CVE-2025-46409&lt;/li&gt; &lt;li&gt;Files or directories accessible to external parties (CWE-552) - CVE-2025-52460&lt;/li&gt; &lt;li&gt;Incorrect permission assignment for critical resource (CWE-732) - CVE-2025-53396&lt;/li&gt; &lt;li&gt;Unrestricted upload of file with dangerous type (CWE-434) - CVE-2025-53970, CVE-2025-54762&lt;/li&gt; &lt;li&gt;Path traversal (CWE-22) - CVE-2025-54819, CVE-2025-58072&lt;/li&gt; &lt;li&gt;Use of hard-coded password (CWE-259) - CVE-2025-58081&lt;/li&gt;&lt;/ul&gt; CVE-2025-46409, CVE-2025-52460, CVE-2025-53970, CVE-2025-54762, CVE-2025-54819 Ruslan Sayfiev, Denis Faiustov and Masahiro Kawada of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2025-53396, CVE-2025-58072, CVE-2025-58081 Masahiro Kawada of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>SS1 provided by provided by DOS Co., Ltd. contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Inadequate encryption strength (CWE-326) - CVE-2025-46409&lt;/li&gt; &lt;li&gt;Files or directories accessible to external parties (CWE-552) - CVE-2025-52460&lt;/li&gt; &lt;li&gt;Incorrect permission assignment for critical resource (CWE-732) - CVE-2025-53396&lt;/li&gt; &lt;li&gt;Unrestricted upload of file with dangerous type (CWE-434) - CVE-2025-53970, CVE-2025-54762&lt;/li&gt; &lt;li&gt;Path traversal (CWE-22) - CVE-2025-54819, CVE-2025-58072&lt;/li&gt; &lt;li&gt;Use of hard-coded password (CWE-259) - CVE-2025-58081&lt;/li&gt;&lt;/ul&gt; CVE-2025-46409, CVE-2025-52460, CVE-2025-53970, CVE-2025-54762, CVE-2025-54819 Ruslan Sayfiev, Denis Faiustov and Masahiro Kawada of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2025-53396, CVE-2025-58072, CVE-2025-58081 Masahiro Kawada of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2025-000064