https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:10:44 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-00913 cnvd-2017-00913 https://cve.radiocsirt.org/vuln/cnvd-2017-00913 https://cve.radiocsirt.org/vuln/euvd-2026-73175 EUVD-2026-73175 https://cve.radiocsirt.org/vuln/euvd-2026-73175 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5141 <p>An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated sessions (SESSION FIXATION).</p> <p>An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated sessions (SESSION FIXATION).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-5141 https://cve.radiocsirt.org/vuln/ghsa-gr56-57j2-v8r2 <p>An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated sessions (SESSION FIXATION).</p> <p>An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated sessions (SESSION FIXATION).</p> https://cve.radiocsirt.org/vuln/ghsa-gr56-57j2-v8r2 https://cve.radiocsirt.org/vuln/gsd-2017-5141 gsd-2017-5141 https://cve.radiocsirt.org/vuln/gsd-2017-5141 https://cve.radiocsirt.org/vuln/icsa-17-033-01 <p>Any user is able to disclose a password by accessing a specific URL. CVE-2017-5139 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Any user is able to disclose a password by accessing a specific URL. CVE-2017-5139 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Password is stored in clear text. CVE-2017-5140 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Any user is able to disclose a password by accessing a specific URL. CVE-2017-5139 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Password is stored in clear text. CVE-2017-5140 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated sessions. CVE-2017-5141 has been assigned to this vulnerability. A CVSS v3 base score of 6.0 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L). Any user is able to disclose a password by accessing a specif…</p> <p>Any user is able to disclose a password by accessing a specific URL. CVE-2017-5139 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Any user is able to disclose a password by accessing a specific URL. CVE-2017-5139 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Password is stored in clear text. CVE-2017-5140 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Any user is able to disclose a password by accessing a specific URL. CVE-2017-5139 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Password is stored in clear text. CVE-2017-5140 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated sessions. CVE-2017-5141 has been assigned to this vulnerability. A CVSS v3 base score of 6.0 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L). Any user is able to disclose a password by accessing a specif…</p> https://cve.radiocsirt.org/vuln/icsa-17-033-01