https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:26:50.160720+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-14087 cnvd-2019-14087 2026-10-03T22:26:50.241366+00:00 cnvd-2019-14087 https://cve.radiocsirt.org/vuln/euvd-2026-324103 EUVD-2026-324103 2026-10-03T22:26:50.241410+00:00 EUVD-2026-324103 https://cve.radiocsirt.org/vuln/fkie_cve-2017-14852 fkie_cve-2017-14852 2026-10-03T22:26:50.241424+00:00

An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate. The attack allows for an eavesdropper to capture the communication and decrypt the data.

 https://cve.radiocsirt.org/vuln/ghsa-pp8q-gcv4-jjfq GHSA-pp8q-gcv4-jjfq 2026-10-03T22:26:50.241456+00:00

An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate. The attack allows for an eavesdropper to capture the communication and decrypt the data.

 https://cve.radiocsirt.org/vuln/gsd-2017-14852 gsd-2017-14852 2026-10-03T22:26:50.241472+00:00 gsd-2017-14852 https://cve.radiocsirt.org/vuln/icsa-19-122-01 ICSA-19-122-01 — Orpak SiteOmat 2026-10-03T22:26:50.241482+00:00

The application utilizes hard coded username and password credentials for application login.CVE-2017-14728 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The application web interface does not properly neutralize user-controllable input, which could allow cross-site scripting.CVE-2017-14850 has been assigned to this vulnerability. A CVSS v3 base score of 6.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). The application does not properly sanitize external input, which may allow an attacker to access the product by specially crafted input.CVE-2017-14851 has been assigned to this vulnerability. A CVSS v3 base score of 9.4 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L). The application transmits information in plain text, including credentials, which could allow an attacker with access to transmitted data to obtain credentials and bypass authentication.CVE-2017-14852 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). The application does not properly restrict syntax from external input, which could allow unauthenticated users to execute specially crafted code on the target system.CVE-2017-14853 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been assigned; the CVSS vect…