https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T16:26:16.375044+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-41806 EUVD-2026-41806 2026-10-17T16:26:16.436346+00:00 EUVD-2026-41806 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13501 fkie_cve-2020-13501 2026-10-17T16:26:16.436384+00:00

An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter InstanceName in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks.

 https://cve.radiocsirt.org/vuln/ghsa-65w4-p422-2r48 GHSA-65w4-p422-2r48 2026-10-17T16:26:16.436417+00:00

An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. Parameter InstanceName in CHaD.asmx is vulnerable to unauthenticated SQL injection attacks.

 https://cve.radiocsirt.org/vuln/gsd-2020-13501 gsd-2020-13501 2026-10-17T16:26:16.436435+00:00 gsd-2020-13501 https://cve.radiocsirt.org/vuln/icsa-20-254-01 ICSA-20-254-01 — AVEVA Enterprise Data Management Web 2026-10-17T16:26:16.436447+00:00

The affected product is vulnerable to SQL injection, which may allow a malicious attacker to execute arbitrary SQL commands under the privileges of the account configured in eDNA Web for SQL access. If eDNA Web is not installed, the deployment is not vulnerable. CVE-2020-13499, CVE-2020-13500, and CVE-2020-13501 have been assigned to this vulnerability.. A CVSS v3 base score of 9.6 has been assigned for versions prior to 2017; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). A CVSS v3 base score of 9.6 has been assigned for versions prior to 2017; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).. A CVSS v3 base score of 9.0 has been assigned for versions 2017-2019; the CVSS vector string is (AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).CVE-2020-13499, CVE-2020-13500, and CVE-2020-13501 have been assigned to this vulnerability. The affected product is vulnerable to SQL injection, which may allow a malicious attacker to execute arbitrary SQL commands under the privileges of the account configured in eDNA Web for SQL access. If eDNA Web is not installed, the deployment is not vulnerable. CVE-2020-13499, CVE-2020-13500, and CVE-2020-13501 have been assigned to this vulnerability.. A CVSS v3 base score of 9.6 has been assigned for versions prior to 2017; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). A CVSS v3 base score of 9.6 has been assigned for versions prior to 2017; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)..…