https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:32:20.129927+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2018-01195 bdu:2018-01195 2026-10-04T23:32:20.210339+00:00 bdu:2018-01195 https://cve.radiocsirt.org/vuln/cnvd-2018-21174 cnvd-2018-21174 2026-10-04T23:32:20.210383+00:00 cnvd-2018-21174 https://cve.radiocsirt.org/vuln/euvd-2026-177606 EUVD-2026-177606 2026-10-04T23:32:20.210403+00:00 EUVD-2026-177606 https://cve.radiocsirt.org/vuln/fkie_cve-2018-17889 fkie_cve-2018-17889 2026-10-04T23:32:20.210422+00:00

In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsing project files, the XMLParser that ships with Wecon PIStudio is vulnerable to a XML external entity injection attack, which may allow sensitive information disclosure.

 https://cve.radiocsirt.org/vuln/ghsa-8j9h-qgqg-vvwq GHSA-8j9h-qgqg-vvwq 2026-10-04T23:32:20.210465+00:00

In WECON Technology Co., Ltd. PI Studio HMI versions 4.1.9 and prior and PI Studio versions 4.2.34 and prior when parsing project files, the XMLParser that ships with Wecon PIStudio is vulnerable to a XML external entity injection attack, which may allow sensitive information disclosure.

 https://cve.radiocsirt.org/vuln/gsd-2018-17889 gsd-2018-17889 2026-10-04T23:32:20.210493+00:00 gsd-2018-17889 https://cve.radiocsirt.org/vuln/icsa-18-277-01 ICSA-18-277-01 — WECON PI Studio (Update A) 2026-10-04T23:32:20.210511+00:00

When parsing specific files the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code under the context of an administrator.CVE-2018-14818 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). When parsing specific files the process does not properly validate user-supplied data, which can result in multiple write instances past the end of an allocated object. An attacker can leverage this vulnerability to execute code under the context of an administrator.CVE-2018-14810 has been assigned to this vulnerability. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). When parsing project files the XMLParser that ships with Wecon PIStudio is vulnerable to a XML external entity injection attack, which may allow sensitive information disclosure.CVE-2018-17889 has been assigned to this vulnerability. A CVSS v3 base score of 5.5 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). When parsing specific files the process does not properly validate user-supplied data, which can result in a read past the end of an allocated object. CVE-2018-14814 has been assigned to this vulnerability. A CVSS v3 base score of 3.3 has been calculated; the CVSS vector string is (AV:L/…