https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T03:03:41.958286+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-178506 EUVD-2026-178506 2026-10-15T03:03:41.961502+00:00 EUVD-2026-178506 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23286 fkie_cve-2021-23286 2026-10-15T03:03:41.961531+00:00

Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions.

 https://cve.radiocsirt.org/vuln/ghsa-7pmh-g9pc-h622 GHSA-7pmh-g9pc-h622 2026-10-15T03:03:41.961560+00:00

Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions.

 https://cve.radiocsirt.org/vuln/gsd-2021-23286 gsd-2021-23286 2026-10-15T03:03:41.961577+00:00 gsd-2021-23286 https://cve.radiocsirt.org/vuln/icsa-22-130-03 ICSA-22-130-03 — Eaton Intelligent Power Manager Infrastructure 2026-10-15T03:03:41.961588+00:00

The affected product has reached its End of Life, it is vulnerable to a stored cross-site scripting vulnerability due to insufficient validation of input from certain resources by the IPM Infrastructure software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system.CVE-2021-23284 has been assigned to this vulnerability. A CVSS v3 base score of 5.7 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H). The affected product has reached its End of Life, it is vulnerable to a reflected cross-site scripting vulnerability due to insufficient validation of input from certain resources by the IPM Infrastructure software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system.CVE-2021-23285 has been assigned to this vulnerability. A CVSS v3 base score of 3.1 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N). The affected product has reached its End of Life, it is vulnerable to a CSV Formula Injection. The vulnerability exists due to improper sanitization of imported CSV files. The attacker would need access to the local Subnet and an administrator interaction to compromise the system.CVE-2021-23286 has been assigned to this vulnerability. A CVSS v3 base score of 5.4 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H).