https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T18:56:24.664939+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-60560 cnvd-2021-60560 2026-10-10T18:56:24.668740+00:00 cnvd-2021-60560 https://cve.radiocsirt.org/vuln/euvd-2026-28246 EUVD-2026-28246 2026-10-10T18:56:24.668773+00:00 EUVD-2026-28246 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33002 fkie_cve-2021-33002 2026-10-10T18:56:24.668788+00:00

Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User interaction is require on the WebAccess HMI Designer (versions 2.1.9.95 and prior).

 https://cve.radiocsirt.org/vuln/ghsa-rv7f-8vhf-g8q8 GHSA-rv7f-8vhf-g8q8 2026-10-10T18:56:24.668817+00:00

Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User interaction is require on the WebAccess HMI Designer (versions 2.1.9.95 and prior).

 https://cve.radiocsirt.org/vuln/gsd-2021-33002 gsd-2021-33002 2026-10-10T18:56:24.668834+00:00 gsd-2021-33002 https://cve.radiocsirt.org/vuln/icsa-21-173-01 ICSA-21-173-01 — Advantech WebAccess HMI Designer (Update A) 2026-10-10T18:56:24.668845+00:00

Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required.CVE-2021-33000 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User interaction is required.CVE-2021-33002 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code. User interaction is required. CVE-2021-33004 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).. --------- Begin Update A Part 4 of 6 ---------CVE-2021-33004 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer.CVE-2021-42706 has been assigned to this vulnerability. A CVSS v3 base score of…