https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:53:46 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-27275 cnvd-2017-27275 https://cve.radiocsirt.org/vuln/cnvd-2017-27275 https://cve.radiocsirt.org/vuln/euvd-2026-77803 EUVD-2026-77803 https://cve.radiocsirt.org/vuln/euvd-2026-77803 https://cve.radiocsirt.org/vuln/fkie_cve-2017-13992 <p>An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution.</p> <p>An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-13992 https://cve.radiocsirt.org/vuln/ghsa-5vfx-vpj9-7jvr <p>An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution.</p> <p>An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-5vfx-vpj9-7jvr https://cve.radiocsirt.org/vuln/gsd-2017-13992 gsd-2017-13992 https://cve.radiocsirt.org/vuln/gsd-2017-13992 https://cve.radiocsirt.org/vuln/icsa-17-257-01 <p>The web user interface fails to prevent access to critical files that non administrative users should not have access to, which could allow an attacker to create or modify files or execute arbitrary code.CVE-2017-13996 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L). The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution.CVE-2017-13992 has been assigned to this vulnerability. A CVSS v3 base score of 8.1 has been assigned; the CVSS vector string is (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). The web interface lacks proper web request validation, which could allow XSS attacks to occur if an authenticated user of the web interface is tricked into clicking a malicious link.CVE-2017-13994 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L). The application does not sufficiently protect sensitive information from unauthorized access.CVE-2017-13998 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).</p> <p>The web user interface fails to prevent access to critical files that non administrative users should not have access to, which could allow an attacker to create or modify files or execute arbitrary code.CVE-2017-13996 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L). The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution.CVE-2017-13992 has been assigned to this vulnerability. A CVSS v3 base score of 8.1 has been assigned; the CVSS vector string is (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). The web interface lacks proper web request validation, which could allow XSS attacks to occur if an authenticated user of the web interface is tricked into clicking a malicious link.CVE-2017-13994 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L). The application does not sufficiently protect sensitive information from unauthorized access.CVE-2017-13998 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).</p> https://cve.radiocsirt.org/vuln/icsa-17-257-01