https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:09:29.843369+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-06201 bdu:2022-06201 2026-10-03T13:09:29.939155+00:00 bdu:2022-06201 https://cve.radiocsirt.org/vuln/cnvd-2021-29828 cnvd-2021-29828 2026-10-03T13:09:29.939199+00:00 cnvd-2021-29828 https://cve.radiocsirt.org/vuln/euvd-2026-182413 EUVD-2026-182413 2026-10-03T13:09:29.939227+00:00 EUVD-2026-182413 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23281 fkie_cve-2021-23281 2026-10-03T13:09:29.939241+00:00

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in meta_driver_srv.js class. Attackers can send a specially crafted packet to make IPM connect to rouge SNMP server and execute attacker-controlled code.

 https://cve.radiocsirt.org/vuln/ghsa-p6w4-xgmf-8r7g GHSA-p6w4-xgmf-8r7g 2026-10-03T13:09:29.939287+00:00

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in meta_driver_srv.js class. Attackers can send a specially crafted packet to make IPM connect to rouge SNMP server and execute attacker-controlled code.

 https://cve.radiocsirt.org/vuln/gsd-2021-23281 gsd-2021-23281 2026-10-03T13:09:29.939303+00:00 gsd-2021-23281 https://cve.radiocsirt.org/vuln/icsa-21-110-06 ICSA-21-110-06 — Eaton Intelligent Power Manager 2026-10-03T13:09:29.939314+00:00

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit this vulnerability. Successful exploitation of this vulnerability can allow attackers to add users in the data base.CVE-2021-23276 has been assigned to this vulnerability. A CVSS v3 base score of 7.1 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to an unauthenticated eval injection vulnerability. The software does not neutralize code syntax from users before using in the dynamic evaluation call in the loadUserFile function under scripts/libs/utils.js. Successful exploitation can allow attackers to control the input to the function and execute attacker-controlled commands.CVE-2021-23277 has been assigned to this vulnerability. A CVSS v3 base score of 8.3 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H). Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to an authenticated arbitrary file delete vulnerability induced due to improper input validation at server/maps_srv.js with the removeBackground function and server/node_upgrade_srv.js with the removeFirmware function. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed.CVE-2021-23278 has been assigned to this vulnerability. A CVSS v3 base score of 8.7 h…