https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:14:01.486505+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-01119 bdu:2019-01119 2026-10-04T07:14:01.604641+00:00 bdu:2019-01119 https://cve.radiocsirt.org/vuln/cnvd-2019-06178 cnvd-2019-06178 2026-10-04T07:14:01.604687+00:00 cnvd-2019-06178 https://cve.radiocsirt.org/vuln/euvd-2026-176748 EUVD-2026-176748 2026-10-04T07:14:01.604704+00:00 EUVD-2026-176748 https://cve.radiocsirt.org/vuln/fkie_cve-2019-6565 fkie_cve-2019-6565 2026-10-04T07:14:01.604717+00:00

Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.

 https://cve.radiocsirt.org/vuln/ghsa-6hwj-585x-wxvq GHSA-6hwj-585x-wxvq 2026-10-04T07:14:01.604748+00:00

Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.

 https://cve.radiocsirt.org/vuln/gsd-2019-6565 gsd-2019-6565 2026-10-04T07:14:01.604764+00:00 gsd-2019-6565 https://cve.radiocsirt.org/vuln/icsa-19-057-01 ICSA-19-057-01 — Moxa IKS, EDS (Update A) 2026-10-04T07:14:01.604776+00:00

Several buffer overflow vulnerabilities have been identified, which may allow remote code execution.CVE-2019-6557 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). A cross-site request forgery has been identified, which may allow for the execution of unauthorized actions on the device.CVE-2019-6561 has been assigned to this vulnerability. A CVSS v3 base score of 9.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The device fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.CVE-2019-6565 has been assigned to this vulnerability. A CVSS v3 base score of 9.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The device does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.CVE-2019-6520 has been assigned to this vulnerability. A CVSS v3 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The devices do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.CVE-2019-6524 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calc…