https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:52:22.687132+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-13785 cnvd-2018-13785 2026-10-05T01:52:22.690952+00:00 cnvd-2018-13785 https://cve.radiocsirt.org/vuln/euvd-2026-174200 EUVD-2026-174200 2026-10-05T01:52:22.690988+00:00 EUVD-2026-174200 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7505 fkie_cve-2018-7505 2026-10-05T01:52:22.691009+00:00

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a TFTP application has unrestricted file uploads to the web application without authorization, which may allow an attacker to execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-mxm8-g5h2-w69j GHSA-mxm8-g5h2-w69j 2026-10-05T01:52:22.691054+00:00

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a TFTP application has unrestricted file uploads to the web application without authorization, which may allow an attacker to execute arbitrary code.

 https://cve.radiocsirt.org/vuln/gsd-2018-7505 gsd-2018-7505 2026-10-05T01:52:22.691084+00:00 gsd-2018-7505 https://cve.radiocsirt.org/vuln/icsa-18-135-01 ICSA-18-135-01 — Advantech WebAccess 2026-10-05T01:52:22.691096+00:00

Several SQL injection vulnerabilities have been identified, which may allow an attacker to disclose sensitive information from the host.CVE-2018-7501 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). An information exposure vulnerability through directory listing has been identified, which may allow an attacker to find important files that are not normally visible.CVE-2018-10590 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A TFTP application has unrestricted file uploads to the web application without authorization, which may allow an attacker to execute arbitrary code.CVE-2018-7505 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). A path transversal vulnerability has been identified, which may allow an attacker to disclose sensitive information on the target.CVE-2018-7503 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A path transversal vulnerability has been identified, which may allow an attacker to execute arbitrary code.CVE-2018-10589 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (…