https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:50:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-03399 bdu:2023-03399 https://cve.radiocsirt.org/vuln/bdu:2023-03399 https://cve.radiocsirt.org/vuln/certfr-2022-avi-123 certfr-2022-avi-123 https://cve.radiocsirt.org/vuln/certfr-2022-avi-123 https://cve.radiocsirt.org/vuln/euvd-2026-13561 EUVD-2026-13561 https://cve.radiocsirt.org/vuln/euvd-2026-13561 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22812 <p>A CWE-79: Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability exists that could cause a web session compromise when an attacker injects and then executes arbitrary malicious JavaScript code inside the target browser. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)</p> <p>A CWE-79: Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability exists that could cause a web session compromise when an attacker injects and then executes arbitrary malicious JavaScript code inside the target browser. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-22812 https://cve.radiocsirt.org/vuln/ghsa-f5p7-gfff-wrgp <p>A CWE-79: Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability exists that could cause a web session compromise when an attacker injects and then executes arbitrary malicious JavaScript code inside the target browser. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)</p> <p>A CWE-79: Improper Neutralization of Input During Web Page Generation (&#39;Cross-site Scripting&#39;) vulnerability exists that could cause a web session compromise when an attacker injects and then executes arbitrary malicious JavaScript code inside the target browser. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)</p> https://cve.radiocsirt.org/vuln/ghsa-f5p7-gfff-wrgp https://cve.radiocsirt.org/vuln/gsd-2022-22812 gsd-2022-22812 https://cve.radiocsirt.org/vuln/gsd-2022-22812 https://cve.radiocsirt.org/vuln/sevd-2022-039-04 <p>Schneider Electric is aware of multiple vulnerabilities in its spaceLYnk, Wiser For KNX, and fellerLYnk products. spaceLYnk is a centralized solution that reduces energy and maintenance costs, increases comfort and flexibility, and simplifies building management. Wiser for KNX ,formerly known as homeLYnk, products are personalized energy efficiency solutions, offering a complete system based on open protocols: KNX, Modbus, BACnet and IP. fellerLYnk offers more flexibility in visualization and trend recording as well as functions such as presence simulation or time switches that the end customer can easily manage. Failure to apply the remediations provided below may risk a Cross-Site Request Forgery (CSRF), Missing Authentication, rate limit, or Stored Cross-Site Scripting (XSS) attack which could result in exfiltrated data and unauthorized access. March 2022 Update: The CVSS score has been updated for CVE-2022-22811 and CVE-2022-22812</p> <p>Schneider Electric is aware of multiple vulnerabilities in its spaceLYnk, Wiser For KNX, and fellerLYnk products. spaceLYnk is a centralized solution that reduces energy and maintenance costs, increases comfort and flexibility, and simplifies building management. Wiser for KNX ,formerly known as homeLYnk, products are personalized energy efficiency solutions, offering a complete system based on open protocols: KNX, Modbus, BACnet and IP. fellerLYnk offers more flexibility in visualization and trend recording as well as functions such as presence simulation or time switches that the end customer can easily manage. Failure to apply the remediations provided below may risk a Cross-Site Request Forgery (CSRF), Missing Authentication, rate limit, or Stored Cross-Site Scripting (XSS) attack which could result in exfiltrated data and unauthorized access. March 2022 Update: The CVSS score has been updated for CVE-2022-22811 and CVE-2022-22812</p> https://cve.radiocsirt.org/vuln/sevd-2022-039-04