https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:40:44 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-01632 bdu:2023-01632 https://cve.radiocsirt.org/vuln/bdu:2023-01632 https://cve.radiocsirt.org/vuln/euvd-2026-19670 EUVD-2026-19670 https://cve.radiocsirt.org/vuln/euvd-2026-19670 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45137 <p>The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.</p> <p>The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-45137 https://cve.radiocsirt.org/vuln/ghsa-rqh8-4mfx-r6p6 <p>The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.</p> <p>The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.</p> https://cve.radiocsirt.org/vuln/ghsa-rqh8-4mfx-r6p6 https://cve.radiocsirt.org/vuln/gsd-2022-45137 gsd-2022-45137 https://cve.radiocsirt.org/vuln/gsd-2022-45137 https://cve.radiocsirt.org/vuln/vde-2022-060 <p>The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. The configuration backend can in some cases be used without authentication and to write data with root privileges. Additionally, the web-based management suffers a CORS misconfiguration and allows reflected XSS (Cross-Site Scripting) attacks.</p> <p>The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. The configuration backend can in some cases be used without authentication and to write data with root privileges. Additionally, the web-based management suffers a CORS misconfiguration and allows reflected XSS (Cross-Site Scripting) attacks.</p> https://cve.radiocsirt.org/vuln/vde-2022-060 https://cve.radiocsirt.org/vuln/vde-2024-054 <p>Several vulnerabilities have been identified in the web-based management of WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser. Additionally, a guideline on secure operation of these solutions has been made available.</p> <p>Several vulnerabilities have been identified in the web-based management of WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser. Additionally, a guideline on secure operation of these solutions has been made available.</p> https://cve.radiocsirt.org/vuln/vde-2024-054