https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:51:15.932069+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2018-avi-172 certfr-2018-avi-172 — De multiples vulnérabilités ont été découvertes dans SCADA les produits Schneider Electric. Elles permettent à un attaq… 2026-10-04T14:51:15.988455+00:00 certfr-2018-avi-172 https://cve.radiocsirt.org/vuln/cnvd-2018-07817 cnvd-2018-07817 2026-10-04T14:51:15.988499+00:00 cnvd-2018-07817 https://cve.radiocsirt.org/vuln/euvd-2026-180927 EUVD-2026-180927 2026-10-04T14:51:15.988515+00:00 EUVD-2026-180927 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7764 fkie_cve-2018-7764 2026-10-04T14:51:15.988528+00:00

The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v1.3.4. There is a directory traversal vulnerability in the processing of the 's' parameter of the applet.

 https://cve.radiocsirt.org/vuln/ghsa-83v7-6jhf-qmq9 GHSA-83v7-6jhf-qmq9 2026-10-04T14:51:15.988558+00:00

The vulnerability exists within runscript.php applet in Schneider Electric U.motion Builder software versions prior to v1.3.4. There is a directory traversal vulnerability in the processing of the 's' parameter of the applet.

 https://cve.radiocsirt.org/vuln/gsd-2018-7764 gsd-2018-7764 2026-10-04T14:51:15.988574+00:00 gsd-2018-7764 https://cve.radiocsirt.org/vuln/icsa-17-180-02 ICSA-17-180-02 — Schneider Electric U.motion Builder (Update A) 2026-10-04T14:51:15.988584+00:00

Unauthenticated users can use calls to various paths in order to perform arbitrary SQL statements against the underlying database.CVE-2017-7973 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The vulnerability exists within processing of track_import_export.php. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.CVE-2018-7765 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerability exists within processing of track_getdata.php. The underlying SQLite database query is subject to SQL injection on the id input parameter.CVE-2018-7766 has been assigned to this vulnerability. A CVSS v3 base score of 6.3 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L). The vulnerability exists within processing of editobject.php. The underlying SQLite database query is subject to SQL injection on the type input parameter.CVE-2018-7767 has been assigned to this vulnerability. A CVSS v3 base score of 6.3 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L). The vulnerability exists within processing of loadtemplate.php. The underlying SQLite database query is subject to SQL injection on the tpl input parameter.CVE-2018-7768 has been assigned to this vulnerability. A CVSS v3…

 https://cve.radiocsirt.org/vuln/sevd-2018-095-01 SEVD-2018-095-01 — Security Notification - U.motion Builder software 2026-10-04T14:51:15.988640+00:00

Schneider Electric is aware of an exploit that targets Schneider Electric’s U.motion Builder software. It is imperative customers cease using U.motion Builder software and remove it from their systems immediately.