https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:48:59.686476+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-00912 cnvd-2017-00912 2026-10-03T12:48:59.752271+00:00 cnvd-2017-00912 https://cve.radiocsirt.org/vuln/euvd-2026-73135 EUVD-2026-73135 2026-10-03T12:48:59.752317+00:00 EUVD-2026-73135 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5142 fkie_cve-2017-5142 2026-10-03T12:48:59.752333+00:00

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user with low privileges is able to open and change the parameters by accessing a specific URL because of Improper Privilege Management.

 https://cve.radiocsirt.org/vuln/ghsa-65mv-26m8-4gw8 GHSA-65mv-26m8-4gw8 2026-10-03T12:48:59.752366+00:00

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user with low privileges is able to open and change the parameters by accessing a specific URL because of Improper Privilege Management.

 https://cve.radiocsirt.org/vuln/gsd-2017-5142 gsd-2017-5142 2026-10-03T12:48:59.752384+00:00 gsd-2017-5142 https://cve.radiocsirt.org/vuln/icsa-17-033-01 ICSA-17-033-01 — Honeywell XL Web II Controller Vulnerabilities 2026-10-03T12:48:59.752395+00:00

Any user is able to disclose a password by accessing a specific URL. CVE-2017-5139 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Any user is able to disclose a password by accessing a specific URL. CVE-2017-5139 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Password is stored in clear text. CVE-2017-5140 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Any user is able to disclose a password by accessing a specific URL. CVE-2017-5139 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Password is stored in clear text. CVE-2017-5140 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated sessions. CVE-2017-5141 has been assigned to this vulnerability. A CVSS v3 base score of 6.0 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L). Any user is able to disclose a password by accessing a specif…