https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:57:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-235816 EUVD-2026-235816 https://cve.radiocsirt.org/vuln/euvd-2026-235816 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40881 <p>SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php</p> <p>SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-40881 https://cve.radiocsirt.org/vuln/ghsa-wx3r-88rg-whxq <p>SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php</p> <p>SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php</p> https://cve.radiocsirt.org/vuln/ghsa-wx3r-88rg-whxq https://cve.radiocsirt.org/vuln/gsd-2022-40881 gsd-2022-40881 https://cve.radiocsirt.org/vuln/gsd-2022-40881 https://cve.radiocsirt.org/vuln/jvndb-2022-001923 <p>SolarView Compact provided by CONTEC CO., LTD. is PV Measurement System. SolarView Compact contains multiple vulnerabilities listed below. OS command injection (CWE-78) - CVE-2022-29303 Improper validation of input values on the send test mail console of the product&#39;s web server may result in OS command injection. Directory traversal (CWE-23) - CVE-2022-29298 Improper validation of a URL on the download page of the product&#39;s web server may allow a remote attacker to view and obtain an arbitrary file. Information disclosure (CWE-200) - CVE-2022-29302 The hidden page which enables to edit the product&#39;s web server contents exists in the product&#39;s web server, and a remote attacker to read and/or alter an arbitrary file on the web server via the hidden page. OS command injection (CWE-78) - CVE-2022-40881 Improper validation of input values on Check Network Communication Page of the product&#39;s web server may result in an arbitrary OS command execution. OS command injection (CWE-78) - CVE-2023-23333 Improper validation of input values on the download page of the product&#39;s web server may result in an arbitrary OS command execution. CVE-2022-29298 Jongheon Yan of S2W Inc reported CONTEC CO., LTD. that the fix for the vulnerability was insufficient in Ver.6.5. CONTEC CO., LTD. and JPCERT/CC updated respective advisories.</p> <p>SolarView Compact provided by CONTEC CO., LTD. is PV Measurement System. SolarView Compact contains multiple vulnerabilities listed below. OS command injection (CWE-78) - CVE-2022-29303 Improper validation of input values on the send test mail console of the product&#39;s web server may result in OS command injection. Directory traversal (CWE-23) - CVE-2022-29298 Improper validation of a URL on the download page of the product&#39;s web server may allow a remote attacker to view and obtain an arbitrary file. Information disclosure (CWE-200) - CVE-2022-29302 The hidden page which enables to edit the product&#39;s web server contents exists in the product&#39;s web server, and a remote attacker to read and/or alter an arbitrary file on the web server via the hidden page. OS command injection (CWE-78) - CVE-2022-40881 Improper validation of input values on Check Network Communication Page of the product&#39;s web server may result in an arbitrary OS command execution. OS command injection (CWE-78) - CVE-2023-23333 Improper validation of input values on the download page of the product&#39;s web server may result in an arbitrary OS command execution. CVE-2022-29298 Jongheon Yan of S2W Inc reported CONTEC CO., LTD. that the fix for the vulnerability was insufficient in Ver.6.5. CONTEC CO., LTD. and JPCERT/CC updated respective advisories.</p> https://cve.radiocsirt.org/vuln/jvndb-2022-001923