https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:30:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08569 bdu:2023-08569 https://cve.radiocsirt.org/vuln/bdu:2023-08569 https://cve.radiocsirt.org/vuln/euvd-2026-270646 EUVD-2026-270646 https://cve.radiocsirt.org/vuln/euvd-2026-270646 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40461 <p>The ACEManager component of ALEOS 4.16 and earlier allows an</p> <p>authenticated user with Administrator privileges to access a file</p> <p>upload field which does not fully validate the file name, creating a</p> <p>Stored Cross-Site Scripting condition.</p> <p>The ACEManager component of ALEOS 4.16 and earlier allows an</p> <p>authenticated user with Administrator privileges to access a file</p> <p>upload field which does not fully validate the file name, creating a</p> <p>Stored Cross-Site Scripting condition.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-40461 https://cve.radiocsirt.org/vuln/ghsa-78cf-35f9-pxqf <p>The ACEManager component of ALEOS 4.16 and earlier allows an</p> <p>authenticated user with Administrator privileges to access a file</p> <p>upload field which does not fully validate the file name, creating a</p> <p>Stored Cross-Site Scripting condition.</p> <p>The ACEManager component of ALEOS 4.16 and earlier allows an</p> <p>authenticated user with Administrator privileges to access a file</p> <p>upload field which does not fully validate the file name, creating a</p> <p>Stored Cross-Site Scripting condition.</p> https://cve.radiocsirt.org/vuln/ghsa-78cf-35f9-pxqf https://cve.radiocsirt.org/vuln/gsd-2023-40461 gsd-2023-40461 https://cve.radiocsirt.org/vuln/gsd-2023-40461 https://cve.radiocsirt.org/vuln/icsa-23-341-06 <p>Loop with Unreachable Exit Condition (&#39;Infinite Loop&#39;) vulnerability in Sierra Wireless, Inc ALEOS could potentially allow a remote attacker to trigger a Denial of Service (DoS) condition for ACEManager without impairing other router functions. This condition is cleared by restarting the device. The ACEManager component of ALEOS 4.16 and earlier does not adequately perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by restarting within ten seconds of becoming unavailable. The ACEManager component of ALEOS 4.16 and earlier does not validate uploaded file names and types, which could potentially allow an authenticated user to perform client-side script execution within ACEManager, altering the device functionality until the device is restarted. The ACEManager component of ALEOS 4.16 and earlier allows an authenticated user with Administrator privileges to access a file upload field which does not fully validate the file name, creating a Stored Cross-Site Scripting condition. The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by restarting within ten seconds of becoming unavailable. When…</p> <p>Loop with Unreachable Exit Condition (&#39;Infinite Loop&#39;) vulnerability in Sierra Wireless, Inc ALEOS could potentially allow a remote attacker to trigger a Denial of Service (DoS) condition for ACEManager without impairing other router functions. This condition is cleared by restarting the device. The ACEManager component of ALEOS 4.16 and earlier does not adequately perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by restarting within ten seconds of becoming unavailable. The ACEManager component of ALEOS 4.16 and earlier does not validate uploaded file names and types, which could potentially allow an authenticated user to perform client-side script execution within ACEManager, altering the device functionality until the device is restarted. The ACEManager component of ALEOS 4.16 and earlier allows an authenticated user with Administrator privileges to access a file upload field which does not fully validate the file name, creating a Stored Cross-Site Scripting condition. The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial of Service (DoS) condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by restarting within ten seconds of becoming unavailable. When…</p> https://cve.radiocsirt.org/vuln/icsa-23-341-06