https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 03:48:38 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04253 bdu:2022-04253 https://cve.radiocsirt.org/vuln/bdu:2022-04253 https://cve.radiocsirt.org/vuln/certfr-2022-avi-546 certfr-2022-avi-546 https://cve.radiocsirt.org/vuln/certfr-2022-avi-546 https://cve.radiocsirt.org/vuln/cnvd-2023-40178 cnvd-2023-40178 https://cve.radiocsirt.org/vuln/cnvd-2023-40178 https://cve.radiocsirt.org/vuln/euvd-2026-213792 EUVD-2026-213792 https://cve.radiocsirt.org/vuln/euvd-2026-213792 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32516 <p>A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop when the product suffers from POST-Based Cross-Site Request Forgery (CSRF). Affected Products: Conext™ ComBox (All Versions)</p> <p>A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop when the product suffers from POST-Based Cross-Site Request Forgery (CSRF). Affected Products: Conext™ ComBox (All Versions)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-32516 https://cve.radiocsirt.org/vuln/ghsa-gqgc-w6w9-6h7c <p>A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop when the product suffers from POST-Based Cross-Site Request Forgery (CSRF). Affected Products: Conext™ ComBox (All Versions)</p> <p>A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop when the product suffers from POST-Based Cross-Site Request Forgery (CSRF). Affected Products: Conext™ ComBox (All Versions)</p> https://cve.radiocsirt.org/vuln/ghsa-gqgc-w6w9-6h7c https://cve.radiocsirt.org/vuln/gsd-2022-32516 gsd-2022-32516 https://cve.radiocsirt.org/vuln/gsd-2022-32516 https://cve.radiocsirt.org/vuln/sevd-2022-165-03 <p>Schneider Electric is aware of multiple vulnerabilities in its Conext™ ComBox product which was discontinued in January 2020 and is no longer in support. The Conext™ ComBox is a communication and monitoring device for installers and operators of Conext solar systems. It features an integrated web server, enabling graphical displays of system daily, monthly and lifetime energy data to be viewed using a simple web browser or Android tablet device. Failure to apply the mitigations provided below may risk Clickjacking, Rate Limiting &amp; Cross-Site Request Forgery attacks. An attacker who successfully exploits one or more of these vulnerabilities could trick the product user/admin into performing unintended actions that may lead to taking over their account or manipulating the station settings.</p> <p>Schneider Electric is aware of multiple vulnerabilities in its Conext™ ComBox product which was discontinued in January 2020 and is no longer in support. The Conext™ ComBox is a communication and monitoring device for installers and operators of Conext solar systems. It features an integrated web server, enabling graphical displays of system daily, monthly and lifetime energy data to be viewed using a simple web browser or Android tablet device. Failure to apply the mitigations provided below may risk Clickjacking, Rate Limiting &amp; Cross-Site Request Forgery attacks. An attacker who successfully exploits one or more of these vulnerabilities could trick the product user/admin into performing unintended actions that may lead to taking over their account or manipulating the station settings.</p> https://cve.radiocsirt.org/vuln/sevd-2022-165-03