Most recent entries from all

bdu:2026-01848

2026-10-02T20:53:36.856470+00:00

bdu:2026-01848

EUVD-2026-267724

2026-10-02T20:53:36.856504+00:00

EUVD-2026-267724

fkie_cve-2025-66604

2026-10-02T20:53:36.856518+00:00

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

The library version could be displayed on the web page. This information could be exploited by an attacker for other attacks.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

GHSA-84hr-4cwh-x64m

2026-10-02T20:53:36.856551+00:00

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

The library version could be displayed on the web page. This information could be exploited by an attacker for other attacks.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

ICSA-26-041-01 — Yokogawa FAST/TOOLS

2026-10-02T20:53:36.856569+00:00

Detailed messages are displayed on the error page. This information could be exploited by an attacker for other attacks. This product is vulnerable to cross-site request forgery (CSRF). When a user accesses a link crafted by an attacker, the user's account could be compromised. This product supports weak cryptographic algorithms, potentially allowing an attacker to decrypt communications with the web server. This product supports old SSL/TLS versions, potentially allowing an attacker to decrypt communications with the web server. Physical paths could be displayed on web pages. This information could be exploited by an attacker for other attacks. This product lacks HSTS (HTTP Strict Transport Security) configuration. When an attacker performs a Man in the middle (MITM) attack, communications with the web server could be sniffed. This product does not specify MIME types. When an attacker performs a content sniffing attack, malicious scripts could be executed. The web server accepts access by IP address. When a worm that randomly searches for IP addresses intrudes into the network, it could potentially be attacked by the worm. The web server accepts the OPTIONS method. An attacker could potentially use this information to carry out other attacks. The library version could be displayed on the web page. This information could be exploited by an attacker for other attacks. Since there are input fields on this web page with the autocomplete attribute enabled, the input content coul…