https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 18:28:26 +0000 https://cve.radiocsirt.org/vuln/certfr-2019-avi-598 certfr-2019-avi-598 https://cve.radiocsirt.org/vuln/certfr-2019-avi-598 https://cve.radiocsirt.org/vuln/cnvd-2019-17000 cnvd-2019-17000 https://cve.radiocsirt.org/vuln/cnvd-2019-17000 https://cve.radiocsirt.org/vuln/euvd-2026-64740 EUVD-2026-64740 https://cve.radiocsirt.org/vuln/euvd-2026-64740 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10692 <p>An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie &#34;Password508&#34; does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site scripting attack to steal the cookie very easily.</p> <p>An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie &#34;Password508&#34; does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site scripting attack to steal the cookie very easily.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10692 https://cve.radiocsirt.org/vuln/ghsa-67hw-j62w-x85g <p>An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie &#34;Password508&#34; does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site scripting attack to steal the cookie very easily.</p> <p>An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie &#34;Password508&#34; does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site scripting attack to steal the cookie very easily.</p> https://cve.radiocsirt.org/vuln/ghsa-67hw-j62w-x85g https://cve.radiocsirt.org/vuln/gsd-2018-10692 gsd-2018-10692 https://cve.radiocsirt.org/vuln/gsd-2018-10692 https://cve.radiocsirt.org/vuln/icsa-19-337-02 <p>The device uses HTTP traffic by default allowing insecure communication to the web server, which could allow an attacker to compromise sensitive data such as credentials.CVE-2018-10690 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). An attacker can navigate to a URL and download the system log without authentication, which may allow access to sensitive information.CVE-2018-10691 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A cross-site scripting attack allows access to session cookies, which may allow an attacker to login into the device.CVE-2018-10692 has been assigned to this vulnerability. A CVSS v3 base score of 6.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). An unauthorized user may execute network troubleshooting commands to cause a buffer overflow condition, which may allow the attacker to execute commands on the device.CVE-2018-10693 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The Wi-Fi connection used to set up the device is not encrypted by default, which may allow an attacker to capture sensitive data.CVE-2018-10694 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculat…</p> <p>The device uses HTTP traffic by default allowing insecure communication to the web server, which could allow an attacker to compromise sensitive data such as credentials.CVE-2018-10690 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). An attacker can navigate to a URL and download the system log without authentication, which may allow access to sensitive information.CVE-2018-10691 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). A cross-site scripting attack allows access to session cookies, which may allow an attacker to login into the device.CVE-2018-10692 has been assigned to this vulnerability. A CVSS v3 base score of 6.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). An unauthorized user may execute network troubleshooting commands to cause a buffer overflow condition, which may allow the attacker to execute commands on the device.CVE-2018-10693 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The Wi-Fi connection used to set up the device is not encrypted by default, which may allow an attacker to capture sensitive data.CVE-2018-10694 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculat…</p> https://cve.radiocsirt.org/vuln/icsa-19-337-02