https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T15:08:51.584971+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-02630 cnvd-2021-02630 2026-10-10T15:08:51.588815+00:00 cnvd-2021-02630 https://cve.radiocsirt.org/vuln/euvd-2026-47029 EUVD-2026-47029 2026-10-10T15:08:51.588848+00:00 EUVD-2026-47029 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28390 fkie_cve-2020-28390 2026-10-10T15:08:51.588862+00:00

A vulnerability has been identified in Opcenter Execution Core (V8.2), Opcenter Execution Core (V8.3). The application contains an information leakage vulnerability in the handling of web client sessions. A local attacker who has access to the Web Client Session Storage could disclose the passwords of currently logged-in users.

 https://cve.radiocsirt.org/vuln/ghsa-mx5q-vqqv-9q7f GHSA-mx5q-vqqv-9q7f 2026-10-10T15:08:51.588892+00:00

A vulnerability has been identified in Opcenter Execution Core (V8.2), Opcenter Execution Core (V8.3). The application contains an information leakage vulnerability in the handling of web client sessions. A local attacker who has access to the Web Client Session Storage could disclose the passwords of currently logged-in users.

 https://cve.radiocsirt.org/vuln/gsd-2020-28390 gsd-2020-28390 2026-10-10T15:08:51.588910+00:00 gsd-2020-28390 https://cve.radiocsirt.org/vuln/icsa-20-196-07 ICSA-20-196-07 — Siemens Opcenter Execution Core (Update B) 2026-10-10T15:08:51.588921+00:00

An authenticated user with the ability to create containers, packages or register defects could perform stored Cross-Site Scripting (XSS) attacks within the vulnerable software. The impact of this attack could result in the session cookies of legitimate users being stolen. Should the attacker gain access to these cookies, they could then hijack the session and perform arbitrary actions in the name of the victim. An authenticated user with the ability to create containers, packages or register defects could perform stored Cross-Site Scripting (XSS) attacks within the vulnerable software. The impact of this attack could result in the session cookies of legitimate users being stolen. Should the attacker gain access to these cookies, they could then hijack the session and perform arbitrary actions in the name of the victim. An authenticated user with the ability to create containers, packages or register defects could perform stored Cross-Site Scripting (XSS) attacks within the vulnerable software. The impact of this attack could result in the session cookies of legitimate users being stolen. Should the attacker gain access to these cookies, they could then hijack the session and perform arbitrary actions in the name of the victim. An authenticated user with the ability to create containers, packages or register defects could perform stored Cross-Site Scripting (XSS) attacks within the vulnerable software. The impact of this attack could result in the session cookies of legitima…