https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:14:17.157614+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-00139 bdu:2019-00139 2026-10-04T07:14:17.196461+00:00 bdu:2019-00139 https://cve.radiocsirt.org/vuln/certfr-2018-avi-610 certfr-2018-avi-610 — De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Elles permettent à un attaquant d… 2026-10-04T07:14:17.196502+00:00 certfr-2018-avi-610 https://cve.radiocsirt.org/vuln/cnvd-2019-03465 cnvd-2019-03465 2026-10-04T07:14:17.196522+00:00 cnvd-2019-03465 https://cve.radiocsirt.org/vuln/euvd-2026-63424 EUVD-2026-63424 2026-10-04T07:14:17.196536+00:00 EUVD-2026-63424 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7837 fkie_cve-2018-7837 2026-10-04T07:14:17.196546+00:00

An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents outside of the intended sphere of control, causing the software to embed incorrect documents into its output and expose restricted information.

 https://cve.radiocsirt.org/vuln/ghsa-j8vf-v36p-7qjw GHSA-j8vf-v36p-7qjw 2026-10-04T07:14:17.196577+00:00

An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents outside of the intended sphere of control, causing the software to embed incorrect documents into its output and expose restricted information.

 https://cve.radiocsirt.org/vuln/gsd-2018-7837 gsd-2018-7837 2026-10-04T07:14:17.196593+00:00 gsd-2018-7837 https://cve.radiocsirt.org/vuln/icsa-19-008-02 ICSA-19-008-02 — Schneider Electric IIoT Monitor (Update A) 2026-10-04T07:14:17.196603+00:00

A path traversal vulnerability exists, which may allow access to files available to SYSTEM user.CVE-2018-7835 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). An unrestricted upload of a file with dangerous type vulnerability exists in the IIoT Monitor software that could allow the uploading and execution of malicious files.CVE-2018-7836 has been assigned to this vulnerability. A CVSS v3 base score of 9.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N). There is an XXE vulnerability in the IIoT Monitor software that may allow the software to resolve documents outside of the intended sphere of control, causing the software to embed incorrect documents into its output and expose restricted information.CVE-2018-7837 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). There is a hardcoded cryptographic key that may affect the confidentiality of the device.CVE-2018-7839 has been assigned to this vulnerability. A CVSS v3 base score of 6.2 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).