https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 19:32:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-317278 EUVD-2026-317278 https://cve.radiocsirt.org/vuln/euvd-2026-317278 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41530 <p>The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability. When the affected product is configured with the automatic folder creation feature enabled, and a product user tries to extract an archive file which has a crafted file name, then the archived files may be extracted to an unexpected folder.</p> <p>The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability. When the affected product is configured with the automatic folder creation feature enabled, and a product user tries to extract an archive file which has a crafted file name, then the archived files may be extracted to an unexpected folder.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41530 https://cve.radiocsirt.org/vuln/ghsa-g8fh-6crc-6rfw <p>The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability. When the affected product is configured with the automatic folder creation feature enabled, and a product user tries to extract an archive file which has a crafted file name, then the archived files may be extracted to an unexpected folder.</p> <p>The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability. When the affected product is configured with the automatic folder creation feature enabled, and a product user tries to extract an archive file which has a crafted file name, then the archived files may be extracted to an unexpected folder.</p> https://cve.radiocsirt.org/vuln/ghsa-g8fh-6crc-6rfw https://cve.radiocsirt.org/vuln/jvndb-2026-000068 <p>Lhaz and Lhaz+ provided by Chitora soft contain the following vulnerability.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/22.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Path traversal (CWE-22) - CVE-2026-41530&lt;/li&gt;&lt;/ul&gt;RyotaK of GMO Flatt Security Inc. and Rei Yano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Lhaz and Lhaz+ provided by Chitora soft contain the following vulnerability.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/22.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Path traversal (CWE-22) - CVE-2026-41530&lt;/li&gt;&lt;/ul&gt;RyotaK of GMO Flatt Security Inc. and Rei Yano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-000068