https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:37:11.661670+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01076 bdu:2024-01076 2026-10-03T15:37:11.667786+00:00 bdu:2024-01076 https://cve.radiocsirt.org/vuln/cnvd-2021-37939 cnvd-2021-37939 2026-10-03T15:37:11.667821+00:00 cnvd-2021-37939 https://cve.radiocsirt.org/vuln/euvd-2026-25541 EUVD-2026-25541 2026-10-03T15:37:11.667837+00:00 EUVD-2026-25541 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27467 fkie_cve-2021-27467 2026-10-03T15:37:11.667849+00:00

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected product’s web interface allows an attacker to route click or keystroke to another page provided by the attacker to gain unauthorized access to sensitive information.

 https://cve.radiocsirt.org/vuln/ghsa-jmv6-j76g-xqjp GHSA-jmv6-j76g-xqjp 2026-10-03T15:37:11.667879+00:00

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected product’s web interface allows an attacker to route click or keystroke to another page provided by the attacker to gain unauthorized access to sensitive information.

 https://cve.radiocsirt.org/vuln/gsd-2021-27467 gsd-2021-27467 2026-10-03T15:37:11.667904+00:00 gsd-2021-27467 https://cve.radiocsirt.org/vuln/icsa-21-138-01 ICSA-21-138-01 — ICSA-21-138-01_Emerson Rosemount X-STREAM 2026-10-03T15:37:11.667915+00:00

The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access.CVE-2021-27457 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). The webserver of the affected products allows unvalidated files to be uploaded, which an attacker could utilize to execute arbitrary code.CVE-2021-27459 has been assigned to this vulnerability. A CVSS v3 base score of 7.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N). The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs. CVE-2021-27461 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). The affected applications utilize persistent cookies where the session cookie attribute is not properly invalidated, allowing an attacker to intercept the cookies and gain access to sensitive information. CVE-2021-27463 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and displ…