https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:03:16.590007+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-32459 cnvd-2017-32459 2026-10-02T13:03:16.639593+00:00 cnvd-2017-32459 https://cve.radiocsirt.org/vuln/euvd-2026-77591 EUVD-2026-77591 2026-10-02T13:03:16.639633+00:00 EUVD-2026-77591 https://cve.radiocsirt.org/vuln/fkie_cve-2017-13754 fkie_cve-2017-13754 2026-10-02T13:03:16.639647+00:00

Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web script or HTML via the "server name" field in actions/ChangeConfiguration.html.

 https://cve.radiocsirt.org/vuln/ghsa-c78m-h25c-7vj6 GHSA-c78m-h25c-7vj6 2026-10-02T13:03:16.639680+00:00

Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web script or HTML via the "server name" field in actions/ChangeConfiguration.html.

 https://cve.radiocsirt.org/vuln/gsd-2017-13754 gsd-2017-13754 2026-10-02T13:03:16.639698+00:00 gsd-2017-13754 https://cve.radiocsirt.org/vuln/icsa-18-102-02 ICSA-18-102-02 — Rockwell Automation FactoryTalk Activation Manager (Update B) 2026-10-02T13:03:16.639710+00:00

A Cross-Site Scripting (XSS) vulnerability was found in certain versions of Wibu-Systems CodeMeter that may allow local attackers to inject arbitrary web script or HTML via a specific field in a configuration file, allowing an attacker to access sensitive information, or even rewrite the content of the HTML page.CVE-2017-13754 has been assigned to this vulnerability. A CVSS v3 base score of 2.7 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N). A custom string copying function of the license server manager in FlexNet Publisher does not use proper bounds checking on incoming data, allowing a remote, unauthenticated user to send crafted messages with the intent of causing a buffer overflow.CVE-2015-8277 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).