https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 17:32:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-281246 EUVD-2026-281246 https://cve.radiocsirt.org/vuln/euvd-2026-281246 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33273 <p>Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an arbitrary file may be created by an administrator of the product. As a result, arbitrary code may be executed on the server.</p> <p>Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an arbitrary file may be created by an administrator of the product. As a result, arbitrary code may be executed on the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33273 https://cve.radiocsirt.org/vuln/ghsa-4w7x-xp7v-5wc2 <p>Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an arbitrary file may be created by an administrator of the product. As a result, arbitrary code may be executed on the server.</p> <p>Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an arbitrary file may be created by an administrator of the product. As a result, arbitrary code may be executed on the server.</p> https://cve.radiocsirt.org/vuln/ghsa-4w7x-xp7v-5wc2 https://cve.radiocsirt.org/vuln/jvndb-2026-000052 <p>MATCHA series provided by ICZ Corporation contains multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/89.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/434.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;SQL injection (CWE-89) - CVE-2026-24913&lt;/li&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-27787&lt;/li&gt;&lt;li&gt;Unrestricted upload of file with dangerous type(CWE-434) - CVE-2026-33273&lt;/li&gt;&lt;/ul&gt;CVE-2026-24913, CVE-2026-27787 Kenta Chikagawa of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-33273 Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>MATCHA series provided by ICZ Corporation contains multiple vulnerabilities listed below.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/89.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/434.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;SQL injection (CWE-89) - CVE-2026-24913&lt;/li&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-27787&lt;/li&gt;&lt;li&gt;Unrestricted upload of file with dangerous type(CWE-434) - CVE-2026-33273&lt;/li&gt;&lt;/ul&gt;CVE-2026-24913, CVE-2026-27787 Kenta Chikagawa of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-33273 Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-000052