https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T11:28:30.596539+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-07625 cnvd-2022-07625 2026-10-05T11:28:30.600978+00:00 cnvd-2022-07625 https://cve.radiocsirt.org/vuln/euvd-2026-231099 EUVD-2026-231099 2026-10-05T11:28:30.601017+00:00 EUVD-2026-231099 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33848 fkie_cve-2021-33848 2026-10-05T11:28:30.601032+00:00

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks. An attacker could inject JavaScript in a GET parameter of HTTP requests and perform unauthorized actions such as stealing internal information and performing actions in context of an authenticated user.

 https://cve.radiocsirt.org/vuln/ghsa-3r3c-xv8w-hfp3 GHSA-3r3c-xv8w-hfp3 2026-10-05T11:28:30.601063+00:00

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks. An attacker could inject JavaScript in a GET parameter of HTTP requests and perform unauthorized actions such as stealing internal information and performing actions in context of an authenticated user.

 https://cve.radiocsirt.org/vuln/gsd-2021-33848 gsd-2021-33848 2026-10-05T11:28:30.601080+00:00 gsd-2021-33848 https://cve.radiocsirt.org/vuln/icsma-21-355-01 ICSMA-21-355-01 — Fresenius Kabi Agilia Connect Infusion System (Update A) 2026-10-05T11:28:30.601092+00:00

Requests may be used to interrupt the normal operation of the device. When exploited, Agilia Link+ must be rebooted via a hard reset triggered by pressing a button on the rack system.CVE-2021-23236 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The SSL/TLS configuration of Agilia Link+ has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an entity to gain access to sensitive information.CVE-2021-31562 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). The Agilia Link+ management interface does not enforce transport layer encryption. Therefore, transmitted data may be sent in cleartext. Transport layer encryption is offered on Port TCP/443, but the affected service does not perform an automated redirect from the unencrypted service on Port TCP/80 to the encrypted service.CVE-2021-41835 has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). The web application on Agilia Link+ implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attr…