https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T07:14:18.985702+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-16271 cnvd-2019-16271 2026-10-12T07:14:19.019797+00:00 cnvd-2019-16271 https://cve.radiocsirt.org/vuln/euvd-2026-53993 EUVD-2026-53993 2026-10-12T07:14:19.019828+00:00 EUVD-2026-53993 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10855 fkie_cve-2019-10855 2026-10-12T07:14:19.019842+00:00

Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.

 https://cve.radiocsirt.org/vuln/ghsa-9wr8-p2g4-v8fw GHSA-9wr8-p2g4-v8fw 2026-10-12T07:14:19.019870+00:00

Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.

 https://cve.radiocsirt.org/vuln/gsd-2019-10855 gsd-2019-10855 2026-10-12T07:14:19.019885+00:00 gsd-2019-10855 https://cve.radiocsirt.org/vuln/icsa-19-141-01 ICSA-19-141-01 — Computrols CBAS Web 2026-10-12T07:14:19.019895+00:00

Users can perform certain actions via HTTP requests without performing any validity checks, which may allow unauthorized actions with administrative privileges if a logged-in user visits a malicious website.CVE-2019-10847 has been assigned to this vulnerability. A CVSS v3 base score of 5.0 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L). The application suffers from a username enumeration weakness. The device behaves differently or sends different responses in a way that may expose security-relevant information about the state of the product.CVE-2019-10848 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Specific parameters passed to scripts is not sanitized before being returned to the user, which may allow an attacker to execute arbitrary code in a user 's browser session in context of an affected site.CVE-2019-10846 has been assigned to this vulnerability. A CVSS v3 base score of 5.4 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N). The application incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component, which could allow attackers to execute commands directly on the operating system.CVE-2019-10854 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/…