https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T18:39:40.287909+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-181164 EUVD-2026-181164 2026-10-18T18:39:40.291245+00:00 EUVD-2026-181164 https://cve.radiocsirt.org/vuln/fkie_cve-2012-2598 fkie_cve-2012-2598 2026-10-18T18:39:40.291277+00:00

Buffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows remote attackers to cause a denial of service (agent outage) via crafted input.

 https://cve.radiocsirt.org/vuln/ghsa-w3p4-49wh-m79f GHSA-w3p4-49wh-m79f 2026-10-18T18:39:40.291307+00:00

Buffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows remote attackers to cause a denial of service (agent outage) via crafted input.

 https://cve.radiocsirt.org/vuln/gsd-2012-2598 gsd-2012-2598 2026-10-18T18:39:40.291324+00:00 gsd-2012-2598 https://cve.radiocsirt.org/vuln/icsa-12-158-01 ICSA-12-158-01 — Siemens WinCC Multiple Vulnerabilities 2026-10-18T18:39:40.291336+00:00

Buffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows remote attackers to cause a denial of service (agent outage) via crafted input. Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary files via a crafted parameter in a URL. Multiple cross-site scripting (XSS) vulnerabilities in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 allow remote attackers to inject arbitrary web script or HTML via vectors involving special characters in parameters. Open redirect vulnerability in an unspecified web application in Siemens WinCC 7.0 SP3 before Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a GET request. The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special characters in parameters, which allows remote authenticated users to read or modify settings via a crafted URL, related to an "XML injection" attack.