https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:35:33.740211+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-209864 EUVD-2026-209864 2026-10-03T13:35:33.834747+00:00 EUVD-2026-209864 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28657 fkie_cve-2023-28657 2026-10-03T13:35:33.834789+00:00

Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC where the affected product is installed may gain an administrative privilege. As a result, information regarding the product may be obtained and/or altered by the user.

 https://cve.radiocsirt.org/vuln/ghsa-mvj7-x43c-gpcj GHSA-mvj7-x43c-gpcj 2026-10-03T13:35:33.834836+00:00

Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC where the affected product is installed may gain an administrative privilege. As a result, information regarding the product may be obtained and/or altered by the user.

 https://cve.radiocsirt.org/vuln/gsd-2023-28657 gsd-2023-28657 2026-10-03T13:35:33.834868+00:00 gsd-2023-28657 https://cve.radiocsirt.org/vuln/jvndb-2023-002002 jvndb-2023-002002 2026-10-03T13:35:33.834881+00:00

CONPROSYS HMI System (CHS) provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. * Plaintext storage of a password (CWE-256) - CVE-2023-28713 * Incorrect permission assignment for critical resource (CWE-732) - CVE-2023-28399 * Improper access control (CWE-284) - CVE-2023-28657 * Cross-site scripting (CWE-79) - CVE-2023-28651 * Server-side request forgery (CWE-918)- CVE-2023-28824 * SQL injection (CWE-89) - CVE-2023-29154 * Improper control of interaction frequency (CWE-799) - CVE-2023-2758 Michael Heinzl reported the vulnerabilities listed below to JPCERT/CC, and JPCERT/CC coordinated with the developer. CVE-2023-28713, CVE-2023-28399, CVE-2023-28657, CVE-2023-28651, CVE-2023-28824, CVE-2023-29154 Tenable, Inc. reported CVE-2023-2758 vulnerability to the developer, and based on the coordination request made by the developer, JPCERT/CC coordinated with Tenable, Inc. and the developer.