https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:42:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-02117 bdu:2023-02117 https://cve.radiocsirt.org/vuln/bdu:2023-02117 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0297 certfr-2023-avi-0297 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0297 https://cve.radiocsirt.org/vuln/euvd-2026-213892 EUVD-2026-213892 https://cve.radiocsirt.org/vuln/euvd-2026-213892 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29412 <p>CWE-78: Improper Neutralization of Special Elements used in an OS Command (&#39;OS Command Injection&#39;) vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.</p> <p>CWE-78: Improper Neutralization of Special Elements used in an OS Command (&#39;OS Command Injection&#39;) vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-29412 https://cve.radiocsirt.org/vuln/ghsa-7p8q-cvq9-54g6 <p>A CWE-78: Improper Handling of Case Sensitivity vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.</p> <p>A CWE-78: Improper Handling of Case Sensitivity vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.</p> https://cve.radiocsirt.org/vuln/ghsa-7p8q-cvq9-54g6 https://cve.radiocsirt.org/vuln/gsd-2023-29412 gsd-2023-29412 https://cve.radiocsirt.org/vuln/gsd-2023-29412 https://cve.radiocsirt.org/vuln/icsa-23-108-02 <p>A vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface. Prior versions of Schneider Electric APC Easy UPS Online contain an OS Command Injection vulnerability that could cause remote code execution when manipulating internal methods through Java RMI interface. A vulnerability exists that could cause a denial-of-service condition when accessed by an unauthenticated user on the Schneider UPS Monitor service.</p> <p>A vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface. Prior versions of Schneider Electric APC Easy UPS Online contain an OS Command Injection vulnerability that could cause remote code execution when manipulating internal methods through Java RMI interface. A vulnerability exists that could cause a denial-of-service condition when accessed by an unauthenticated user on the Schneider UPS Monitor service.</p> https://cve.radiocsirt.org/vuln/icsa-23-108-02 https://cve.radiocsirt.org/vuln/sevd-2023-101-04 <p>Schneider Electric is aware of multiple vulnerabilities in its Easy UPS Online Monitoring Software, known as APC Easy UPS Online Monitoring Software, and Schneider Electric UPS Online Monitoring Software known as Schneider SP Series UPS Online Monitoring Software in China.</p> <p>The Easy UPS Online Monitoring Software is used to configure and manage Easy UPS products.</p> <p>Failure to apply the remediations provided below may risk remote code execution, escalation of privileges, or authentication bypass, which could result in execution of malicious web code or loss of device functionality.</p> <p>June 2024 Update: Vulnerability description for CVE-2023-29412 has been updated. CWE-78 is correct, but the initial description didn’t match with this CWE ID. Remediation instructions were updated to clarify support status.</p> <p>Schneider Electric is aware of multiple vulnerabilities in its Easy UPS Online Monitoring Software, known as APC Easy UPS Online Monitoring Software, and Schneider Electric UPS Online Monitoring Software known as Schneider SP Series UPS Online Monitoring Software in China.</p> <p>The Easy UPS Online Monitoring Software is used to configure and manage Easy UPS products.</p> <p>Failure to apply the remediations provided below may risk remote code execution, escalation of privileges, or authentication bypass, which could result in execution of malicious web code or loss of device functionality.</p> <p>June 2024 Update: Vulnerability description for CVE-2023-29412 has been updated. CWE-78 is correct, but the initial description didn’t match with this CWE ID. Remediation instructions were updated to clarify support status.</p> https://cve.radiocsirt.org/vuln/sevd-2023-101-04