https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:48:53.128151+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-209908 EUVD-2026-209908 2026-10-03T22:48:53.131472+00:00 EUVD-2026-209908 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28399 fkie_cve-2023-28399 2026-10-03T22:48:53.131504+00:00

Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. ACL (Access Control List) is not appropriately set to the local folder where the affected product is installed, therefore a wide range of privileges is permitted to a user of the PC where the affected product is installed. As a result, the user may be able to destroy the system and/or execute a malicious program.

 https://cve.radiocsirt.org/vuln/ghsa-vwgg-32x4-wm56 GHSA-vwgg-32x4-wm56 2026-10-03T22:48:53.131536+00:00

Incorrect permission assignment for critical resource exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. ACL (Access Control List) is not appropriately set to the local folder where the affected product is installed, therefore a wide range of privileges is permitted to a user of the PC where the affected product is installed. As a result, the user may be able to destroy the system and/or execute a malicious program.

 https://cve.radiocsirt.org/vuln/gsd-2023-28399 gsd-2023-28399 2026-10-03T22:48:53.131554+00:00 gsd-2023-28399 https://cve.radiocsirt.org/vuln/jvndb-2023-002002 jvndb-2023-002002 2026-10-03T22:48:53.131565+00:00

CONPROSYS HMI System (CHS) provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. * Plaintext storage of a password (CWE-256) - CVE-2023-28713 * Incorrect permission assignment for critical resource (CWE-732) - CVE-2023-28399 * Improper access control (CWE-284) - CVE-2023-28657 * Cross-site scripting (CWE-79) - CVE-2023-28651 * Server-side request forgery (CWE-918)- CVE-2023-28824 * SQL injection (CWE-89) - CVE-2023-29154 * Improper control of interaction frequency (CWE-799) - CVE-2023-2758 Michael Heinzl reported the vulnerabilities listed below to JPCERT/CC, and JPCERT/CC coordinated with the developer. CVE-2023-28713, CVE-2023-28399, CVE-2023-28657, CVE-2023-28651, CVE-2023-28824, CVE-2023-29154 Tenable, Inc. reported CVE-2023-2758 vulnerability to the developer, and based on the coordination request made by the developer, JPCERT/CC coordinated with Tenable, Inc. and the developer.