https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T01:10:18.255533+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-07785 cnvd-2019-07785 2026-10-13T01:10:18.259311+00:00 cnvd-2019-07785 https://cve.radiocsirt.org/vuln/euvd-2026-69470 EUVD-2026-69470 2026-10-13T01:10:18.259347+00:00 EUVD-2026-69470 https://cve.radiocsirt.org/vuln/fkie_cve-2018-18880 fkie_cve-2018-18880 2026-10-13T01:10:18.259362+00:00

In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a networkdiags.php reflected Cross-site scripting (XSS) vulnerability allows remote authenticated users to inject arbitrary web script.

 https://cve.radiocsirt.org/vuln/ghsa-mwrf-mrxq-gpjp GHSA-mwrf-mrxq-gpjp 2026-10-13T01:10:18.259403+00:00

In firmware version MS_2.6.9900 of Columbia Weather MicroServer, a networkdiags.php reflected Cross-site scripting (XSS) vulnerability allows remote authenticated users to inject arbitrary web script.

 https://cve.radiocsirt.org/vuln/gsd-2018-18880 gsd-2018-18880 2026-10-13T01:10:18.259420+00:00 gsd-2018-18880 https://cve.radiocsirt.org/vuln/icsa-19-078-02 ICSA-19-078-02 — Columbia Weather Systems MicroServer 2026-10-13T01:10:18.259432+00:00

A cross-site scripting error exists that does not properly validate input, which may allow arbitrary web script to be executed.CVE-2018-18875 has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). A path traversal vulnerability exists that could allow an attacker read access to files within the directory structure of the target device.CVE-2018-18876 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). An improper authentication vulnerability exists that could allow a possible authentication bypass, allowing an attacker to manipulate the device and cause a denial-of-service condition.CVE-2018-18877 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). An improper input validation vulnerability exists allowing an attacker to craft the input in a form that is not expected by the rest of the application, causing a denial-of-service condition and the device to become unavailable.CVE-2018-18878 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). A code injection vulnerability exists that could allow remote code execution.CVE-2018-18879 has been assigned to this vulnerability. A CVSS…