https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 12:49:14 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-15903 cnvd-2019-15903 https://cve.radiocsirt.org/vuln/cnvd-2019-15903 https://cve.radiocsirt.org/vuln/euvd-2026-53977 EUVD-2026-53977 https://cve.radiocsirt.org/vuln/euvd-2026-53977 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10847 <p>Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.</p> <p>Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10847 https://cve.radiocsirt.org/vuln/ghsa-q3gx-7gwv-xv6q <p>Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.</p> <p>Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.</p> https://cve.radiocsirt.org/vuln/ghsa-q3gx-7gwv-xv6q https://cve.radiocsirt.org/vuln/gsd-2019-10847 gsd-2019-10847 https://cve.radiocsirt.org/vuln/gsd-2019-10847 https://cve.radiocsirt.org/vuln/icsa-19-141-01 <p>Users can perform certain actions via HTTP requests without performing any validity checks, which may allow unauthorized actions with administrative privileges if a logged-in user visits a malicious website.CVE-2019-10847 has been assigned to this vulnerability. A CVSS v3 base score of 5.0 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L). The application suffers from a username enumeration weakness. The device behaves differently or sends different responses in a way that may expose security-relevant information about the state of the product.CVE-2019-10848 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Specific parameters passed to scripts is not sanitized before being returned to the user, which may allow an attacker to execute arbitrary code in a user &#39;s browser session in context of an affected site.CVE-2019-10846 has been assigned to this vulnerability. A CVSS v3 base score of 5.4 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N). The application incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component, which could allow attackers to execute commands directly on the operating system.CVE-2019-10854 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/…</p> <p>Users can perform certain actions via HTTP requests without performing any validity checks, which may allow unauthorized actions with administrative privileges if a logged-in user visits a malicious website.CVE-2019-10847 has been assigned to this vulnerability. A CVSS v3 base score of 5.0 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L). The application suffers from a username enumeration weakness. The device behaves differently or sends different responses in a way that may expose security-relevant information about the state of the product.CVE-2019-10848 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Specific parameters passed to scripts is not sanitized before being returned to the user, which may allow an attacker to execute arbitrary code in a user &#39;s browser session in context of an affected site.CVE-2019-10846 has been assigned to this vulnerability. A CVSS v3 base score of 5.4 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N). The application incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component, which could allow attackers to execute commands directly on the operating system.CVE-2019-10854 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/…</p> https://cve.radiocsirt.org/vuln/icsa-19-141-01