https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:53:56 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-05675 cnvd-2018-05675 https://cve.radiocsirt.org/vuln/cnvd-2018-05675 https://cve.radiocsirt.org/vuln/euvd-2026-172174 EUVD-2026-172174 https://cve.radiocsirt.org/vuln/euvd-2026-172174 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9969 <p>An information disclosure vulnerability exists in Schneider Electric&#39;s IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information.</p> <p>An information disclosure vulnerability exists in Schneider Electric&#39;s IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9969 https://cve.radiocsirt.org/vuln/ghsa-rq73-574j-8g3v <p>An information disclosure vulnerability exists in Schneider Electric&#39;s IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information.</p> <p>An information disclosure vulnerability exists in Schneider Electric&#39;s IGSS Mobile application version 3.01 and prior. Passwords are stored in clear text in the configuration which can result in exposure of sensitive information.</p> https://cve.radiocsirt.org/vuln/ghsa-rq73-574j-8g3v https://cve.radiocsirt.org/vuln/gsd-2017-9969 gsd-2017-9969 https://cve.radiocsirt.org/vuln/gsd-2017-9969 https://cve.radiocsirt.org/vuln/icsa-18-046-03 <p>IGSS Mobile app lacks certificate pinning during the TLS/SSL connection establishing process. This issue could allow an attacker to execute a man-in-the-middle attack. CVE-2017-9968 has been assigned to this vulnerability. A CVSS v3 base score of 6.4 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N). IGSS Mobile app passwords are stored in clear-text in the configuration file. CVE-2017-9969 has been assigned to this vulnerability. A CVSS v3 base score of 6.0 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).</p> <p>IGSS Mobile app lacks certificate pinning during the TLS/SSL connection establishing process. This issue could allow an attacker to execute a man-in-the-middle attack. CVE-2017-9968 has been assigned to this vulnerability. A CVSS v3 base score of 6.4 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N). IGSS Mobile app passwords are stored in clear-text in the configuration file. CVE-2017-9969 has been assigned to this vulnerability. A CVSS v3 base score of 6.0 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N).</p> https://cve.radiocsirt.org/vuln/icsa-18-046-03