https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:48:23.028037+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-224616 EUVD-2026-224616 2026-10-03T07:48:23.094197+00:00 EUVD-2026-224616 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21940 fkie_cve-2022-21940 2026-10-03T07:48:23.094234+00:00

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie.

 https://cve.radiocsirt.org/vuln/ghsa-hp26-q6wq-vrfp GHSA-hp26-q6wq-vrfp 2026-10-03T07:48:23.094267+00:00

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie.

 https://cve.radiocsirt.org/vuln/gsd-2022-21940 gsd-2022-21940 2026-10-03T07:48:23.094284+00:00 gsd-2022-21940 https://cve.radiocsirt.org/vuln/icsa-23-040-03 ICSA-23-040-03 — Johnson Controls System Configuration Tool (SCT) 2026-10-03T07:48:23.094296+00:00

System Configuration Tool (SCT) versions 14 and 15 are vulnerable during a cross-site scripting attack. This could allow an attacker to access cookies and take control of an affected system.-CVE-2022-21939 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). System Configuration Tool (SCT) versions 14 and 15 are vulnerable during a cross-site scripting attack. This could allow an attacker to access cookies and take control of an affected system.-CVE-2022-21940 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).