https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:42:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01109 bdu:2021-01109 https://cve.radiocsirt.org/vuln/bdu:2021-01109 https://cve.radiocsirt.org/vuln/certfr-2021-avi-024 certfr-2021-avi-024 https://cve.radiocsirt.org/vuln/certfr-2021-avi-024 https://cve.radiocsirt.org/vuln/cnvd-2021-31179 cnvd-2021-31179 https://cve.radiocsirt.org/vuln/cnvd-2021-31179 https://cve.radiocsirt.org/vuln/euvd-2026-23094 EUVD-2026-23094 https://cve.radiocsirt.org/vuln/euvd-2026-23094 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22698 <p>A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.</p> <p>A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-22698 https://cve.radiocsirt.org/vuln/ghsa-2fr7-wcm8-348v <p>A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.</p> <p>A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.</p> https://cve.radiocsirt.org/vuln/ghsa-2fr7-wcm8-348v https://cve.radiocsirt.org/vuln/gsd-2021-22698 gsd-2021-22698 https://cve.radiocsirt.org/vuln/gsd-2021-22698 https://cve.radiocsirt.org/vuln/icsa-21-012-01 <p>A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed. When a malicious SSD file is uploaded and improperly parsed, an attacker could cause a use-after-free condition or stack-based buffer overflow resulting in remote code execution.</p> <p>A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed. When a malicious SSD file is uploaded and improperly parsed, an attacker could cause a use-after-free condition or stack-based buffer overflow resulting in remote code execution.</p> https://cve.radiocsirt.org/vuln/icsa-21-012-01 https://cve.radiocsirt.org/vuln/sevd-2021-012-02 <p>Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Build - Rapsody product. The EcoStruxure Power Build - Rapsody product is a LV switchboard configuration and quotation software to support users in the configuration and quotation process for Prisma switchboard projects in the non-critical building segment. Failure to apply the mitigations provided below may allow remote code execution which could result in serious interruption of business operations and exfiltration of credentials and other business sensitive data. June 2022 Update: Remediation added</p> <p>Schneider Electric is aware of multiple vulnerabilities in its EcoStruxure Power Build - Rapsody product. The EcoStruxure Power Build - Rapsody product is a LV switchboard configuration and quotation software to support users in the configuration and quotation process for Prisma switchboard projects in the non-critical building segment. Failure to apply the mitigations provided below may allow remote code execution which could result in serious interruption of business operations and exfiltration of credentials and other business sensitive data. June 2022 Update: Remediation added</p> https://cve.radiocsirt.org/vuln/sevd-2021-012-02