https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 12:39:05 +0000 https://vulnerability.circl.lu/vuln/jvndb-2026-000141 <p>baserCMS provided by baserCMS User Community contains multiple vulnerabilities listed below:&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/89.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/306.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-93460, CVE-2026-93463, CVE-2026-93464&lt;/li&gt;&lt;li&gt;SQL injection (CWE-89) - CVE-2026-62956&lt;/li&gt;&lt;li&gt;Missing authentication for critical function (CWE-306) - CVE-2026-93462&lt;/li&gt;&lt;/ul&gt;CVE-2026-93460 So Kato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-62956, CVE-2026-93462 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-93463 Gai Tanaka of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-93464 Kuniyoshi Noguchi (KuniNogu) of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>baserCMS provided by baserCMS User Community contains multiple vulnerabilities listed below:&lt;a href=&#39;https://cwe.mitre.org/data/definitions/79.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/89.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/306.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2026-93460, CVE-2026-93463, CVE-2026-93464&lt;/li&gt;&lt;li&gt;SQL injection (CWE-89) - CVE-2026-62956&lt;/li&gt;&lt;li&gt;Missing authentication for critical function (CWE-306) - CVE-2026-93462&lt;/li&gt;&lt;/ul&gt;CVE-2026-93460 So Kato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-62956, CVE-2026-93462 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-93463 Gai Tanaka of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2026-93464 Kuniyoshi Noguchi (KuniNogu) of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://vulnerability.circl.lu/vuln/jvndb-2026-000141