https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:43:19.691985+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-209894 EUVD-2026-209894 2026-10-02T18:43:19.767519+00:00 EUVD-2026-209894 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2758 fkie_cve-2023-2758 2026-10-02T18:43:19.767568+00:00

A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismatch in certain configuration files, a remote, unauthenticated attacker may deny logins for an extended period of time.

 https://cve.radiocsirt.org/vuln/ghsa-grw6-p9qm-qmx4 GHSA-grw6-p9qm-qmx4 2026-10-02T18:43:19.767619+00:00

A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismatch in certain configuration files, a remote, unauthenticated attacker may deny logins for an extended period of time.

 https://cve.radiocsirt.org/vuln/gsd-2023-2758 gsd-2023-2758 2026-10-02T18:43:19.767647+00:00 gsd-2023-2758 https://cve.radiocsirt.org/vuln/jvndb-2023-002002 jvndb-2023-002002 2026-10-02T18:43:19.767666+00:00

CONPROSYS HMI System (CHS) provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. * Plaintext storage of a password (CWE-256) - CVE-2023-28713 * Incorrect permission assignment for critical resource (CWE-732) - CVE-2023-28399 * Improper access control (CWE-284) - CVE-2023-28657 * Cross-site scripting (CWE-79) - CVE-2023-28651 * Server-side request forgery (CWE-918)- CVE-2023-28824 * SQL injection (CWE-89) - CVE-2023-29154 * Improper control of interaction frequency (CWE-799) - CVE-2023-2758 Michael Heinzl reported the vulnerabilities listed below to JPCERT/CC, and JPCERT/CC coordinated with the developer. CVE-2023-28713, CVE-2023-28399, CVE-2023-28657, CVE-2023-28651, CVE-2023-28824, CVE-2023-29154 Tenable, Inc. reported CVE-2023-2758 vulnerability to the developer, and based on the coordination request made by the developer, JPCERT/CC coordinated with Tenable, Inc. and the developer.