https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:16:52 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-547 certfr-2022-avi-547 https://cve.radiocsirt.org/vuln/certfr-2022-avi-547 https://cve.radiocsirt.org/vuln/cnvd-2022-45215 cnvd-2022-45215 https://cve.radiocsirt.org/vuln/cnvd-2022-45215 https://cve.radiocsirt.org/vuln/euvd-2026-260539 EUVD-2026-260539 https://cve.radiocsirt.org/vuln/euvd-2026-260539 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30231 <p>A vulnerability has been identified in SICAM GridEdge (Classic) (All versions &lt; V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user&#39;s password hash.</p> <p>A vulnerability has been identified in SICAM GridEdge (Classic) (All versions &lt; V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user&#39;s password hash.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-30231 https://cve.radiocsirt.org/vuln/ghsa-9rc7-jmvv-4fhr <p>A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions &lt; V2.6.6), SICAM GridEdge Essential Intel (All versions &lt; V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions &lt; V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions &lt; V2.6.6). The affected software discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another users password hash.</p> <p>A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions &lt; V2.6.6), SICAM GridEdge Essential Intel (All versions &lt; V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions &lt; V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions &lt; V2.6.6). The affected software discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another users password hash.</p> https://cve.radiocsirt.org/vuln/ghsa-9rc7-jmvv-4fhr https://cve.radiocsirt.org/vuln/gsd-2022-30231 gsd-2022-30231 https://cve.radiocsirt.org/vuln/gsd-2022-30231 https://cve.radiocsirt.org/vuln/icsa-22-167-08 <p>The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user&#39;s id is known. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions. The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user&#39;s password hash.</p> <p>The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user&#39;s id is known. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions. The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user&#39;s password hash.</p> https://cve.radiocsirt.org/vuln/icsa-22-167-08 https://cve.radiocsirt.org/vuln/ssa-631336 <p>The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user&#39;s id is known. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions. The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user&#39;s password hash.</p> <p>The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user&#39;s id is known. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions. The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user&#39;s password hash.</p> https://cve.radiocsirt.org/vuln/ssa-631336