https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:04:34.226346+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-209907 EUVD-2026-209907 2026-10-03T11:04:34.300093+00:00 EUVD-2026-209907 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28651 fkie_cve-2023-28651 2026-10-03T11:04:34.300145+00:00

Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. If a user who can access the affected product with an administrative privilege configures specially crafted settings, an arbitrary script may be executed on the web browser of the other user who is accessing the affected product with an administrative privilege.

 https://cve.radiocsirt.org/vuln/ghsa-8xq3-xxw7-pvf5 GHSA-8xq3-xxw7-pvf5 2026-10-03T11:04:34.300188+00:00

Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. If a user who can access the affected product with an administrative privilege configures specially crafted settings, an arbitrary script may be executed on the web browser of the other user who is accessing the affected product with an administrative privilege.

 https://cve.radiocsirt.org/vuln/gsd-2023-28651 gsd-2023-28651 2026-10-03T11:04:34.300211+00:00 gsd-2023-28651 https://cve.radiocsirt.org/vuln/jvndb-2023-002002 jvndb-2023-002002 2026-10-03T11:04:34.300223+00:00

CONPROSYS HMI System (CHS) provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. * Plaintext storage of a password (CWE-256) - CVE-2023-28713 * Incorrect permission assignment for critical resource (CWE-732) - CVE-2023-28399 * Improper access control (CWE-284) - CVE-2023-28657 * Cross-site scripting (CWE-79) - CVE-2023-28651 * Server-side request forgery (CWE-918)- CVE-2023-28824 * SQL injection (CWE-89) - CVE-2023-29154 * Improper control of interaction frequency (CWE-799) - CVE-2023-2758 Michael Heinzl reported the vulnerabilities listed below to JPCERT/CC, and JPCERT/CC coordinated with the developer. CVE-2023-28713, CVE-2023-28399, CVE-2023-28657, CVE-2023-28651, CVE-2023-28824, CVE-2023-29154 Tenable, Inc. reported CVE-2023-2758 vulnerability to the developer, and based on the coordination request made by the developer, JPCERT/CC coordinated with Tenable, Inc. and the developer.