https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:23:28.580539+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-102831 cnvd-2021-102831 2026-10-03T15:23:28.584038+00:00 cnvd-2021-102831 https://cve.radiocsirt.org/vuln/euvd-2026-170777 EUVD-2026-170777 2026-10-03T15:23:28.584069+00:00 EUVD-2026-170777 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43989 fkie_cve-2021-43989 2026-10-03T15:23:28.584084+00:00

mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes.

 https://cve.radiocsirt.org/vuln/ghsa-5xc5-crm5-w93r GHSA-5xc5-crm5-w93r 2026-10-03T15:23:28.584111+00:00

mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes.

 https://cve.radiocsirt.org/vuln/gsd-2021-43989 gsd-2021-43989 2026-10-03T15:23:28.584126+00:00 gsd-2021-43989 https://cve.radiocsirt.org/vuln/icsa-21-355-01 ICSA-21-355-01 — mySCADA myPRO 2026-10-03T15:23:28.584137+00:00

An unauthenticated remote attacker can access the application without any form of authentication or authorization.CVE-2021-43985 has been assigned to this vulnerability. A CVSS v3 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). The affected product stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes.CVE-2021-43989 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). An additional, nondocumented administrative account exists in the affected product that is not exposed through the web interface, which cannot be deleted or changed through the regular web interface.CVE-2021-43987 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected product has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands.CVE-2021-44453 has been assigned to this vulnerability. A CVSS v3 base score of 10.0 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). The affected product has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.CVE-2021-22657 has been assigned to this…