https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:43:45.917372+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-02464 cnvd-2020-02464 2026-10-03T17:43:45.925481+00:00 cnvd-2020-02464 https://cve.radiocsirt.org/vuln/euvd-2026-58595 EUVD-2026-58595 2026-10-03T17:43:45.925520+00:00 EUVD-2026-58595 https://cve.radiocsirt.org/vuln/fkie_cve-2019-18244 fkie_cve-2019-18244 2026-10-03T17:43:45.925534+00:00

In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts are customized during installation or upgrade of PI Vision. The update fixes a previously reported issue.

 https://cve.radiocsirt.org/vuln/ghsa-3jf8-gh66-pxvp GHSA-3jf8-gh66-pxvp 2026-10-03T17:43:45.925563+00:00

OSIsoft PI Vision, PI Vision 2017 R2, PI Vision 2017 R2 SP1, PI Vision 2019. The affected product records the service account password in the installation log files when a non-default service account and password are specified during installation or upgrade.

 https://cve.radiocsirt.org/vuln/gsd-2019-18244 gsd-2019-18244 2026-10-03T17:43:45.925579+00:00 gsd-2019-18244 https://cve.radiocsirt.org/vuln/icsa-20-014-06 ICSA-20-014-06 — OSIsoft PI Vision 2026-10-03T17:43:45.925589+00:00

The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes.CVE-2019-18275 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administration site.CVE-2019-18271 has been assigned to this vulnerability. A CVSS v3 base score of 7.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H). The affected product is vulnerable to cross-site scripting, which may allow invalid input to be introduced.CVE-2019-18273 has been assigned to this vulnerability. A CVSS v3 base score of 6.4 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). The affected product records the service account password in the installation log files when a non-default service account and password are specified during installation or upgrade.CVE-2019-18244 has been assigned to this vulnerability. A CVSS v3 base score of 5.1 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).