https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:19:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-281248 EUVD-2026-281248 https://cve.radiocsirt.org/vuln/euvd-2026-281248 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24913 <p>SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the database may be obtained or altered by a user who can log in to the product.</p> <p>SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the database may be obtained or altered by a user who can log in to the product.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-24913 https://cve.radiocsirt.org/vuln/ghsa-xw7j-84mx-6v67 <p>SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the database may be obtained or altered by a user who can log in to the product.</p> <p>SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the database may be obtained or altered by a user who can log in to the product.</p> https://cve.radiocsirt.org/vuln/ghsa-xw7j-84mx-6v67 https://cve.radiocsirt.org/vuln/jvndb-2026-000052 <p>MATCHA series provided by ICZ Corporation contains multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/89.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/434.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;SQL injection (CWE-89) - CVE-2026-24913&lt;/li&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-27787&lt;/li&gt;&lt;li&gt;Unrestricted upload of file with dangerous type(CWE-434) - CVE-2026-33273&lt;/li&gt;&lt;/ul&gt;CVE-2026-24913, CVE-2026-27787 Kenta Chikagawa of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-33273 Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>MATCHA series provided by ICZ Corporation contains multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/89.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/434.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;SQL injection (CWE-89) - CVE-2026-24913&lt;/li&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-27787&lt;/li&gt;&lt;li&gt;Unrestricted upload of file with dangerous type(CWE-434) - CVE-2026-33273&lt;/li&gt;&lt;/ul&gt;CVE-2026-24913, CVE-2026-27787 Kenta Chikagawa of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-33273 Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-000052