https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:24:34.720568+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2020-avi-316 certfr-2020-avi-316 — De multiples vulnérabilités ont été découvertes dans Schneider EcoStruxure Operator Terminal. Elles permettent à un att… 2026-10-05T17:24:34.795982+00:00 certfr-2020-avi-316 https://cve.radiocsirt.org/vuln/cnvd-2020-30438 cnvd-2020-30438 2026-10-05T17:24:34.796024+00:00 cnvd-2020-30438 https://cve.radiocsirt.org/vuln/euvd-2026-37962 EUVD-2026-37962 2026-10-05T17:24:34.796040+00:00 EUVD-2026-37962 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7496 fkie_cve-2020-7496 2026-10-05T17:24:34.796052+00:00

A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)which could cause unauthorized write access when opening the project file.

 https://cve.radiocsirt.org/vuln/ghsa-wcx9-vc6g-982m GHSA-wcx9-vc6g-982m 2026-10-05T17:24:34.796080+00:00

A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)which could cause unauthorized write access when opening the project file.

 https://cve.radiocsirt.org/vuln/gsd-2020-7496 gsd-2020-7496 2026-10-05T17:24:34.796096+00:00 gsd-2020-7496 https://cve.radiocsirt.org/vuln/icsa-20-142-02 ICSA-20-142-02 — Schneider Electric EcoStruxure Operator Terminal Expert 2026-10-05T17:24:34.796107+00:00

An attacker could exploit an SQL injection vulnerability by enticing a user to open a maliciously crafted project file.CVE-2020-7493 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). An attacker could exploit this path traversal vulnerability by getting a user to visit a malicious page or open a malicious file.CVE-2020-7494 has been assigned to this vulnerability. A CVSS v3 base score of 7.7 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). An attacker could exploit this path traversal vulnerability by getting a user to visit a malicious page or open a malicious file.CVE-2020-7495 has been assigned to this vulnerability. A CVSS v3 base score of 3.3 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). A remote attacker can trick a victim to open a specially crafted project file and gain unauthorized write access to the target system.CVE-2020-7496 has been assigned to this vulnerability. A CVSS v3 base score of 3.3 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). A vulnerability exists that could cause arbitrary application execution when the computer starts.CVE-2020-7497 has been assigned to this vulnerability. A CVSS v3 base score of 6.3 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).