https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:07:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-06973 bdu:2023-06973 https://cve.radiocsirt.org/vuln/bdu:2023-06973 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0819 certfr-2023-avi-0819 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0819 https://cve.radiocsirt.org/vuln/cnvd-2023-75577 cnvd-2023-75577 https://cve.radiocsirt.org/vuln/cnvd-2023-75577 https://cve.radiocsirt.org/vuln/euvd-2026-219638 EUVD-2026-219638 https://cve.radiocsirt.org/vuln/euvd-2026-219638 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42796 <p>A vulnerability has been identified in CP-8031 MASTER MODULE (All versions &lt; CPCI85 V05.11), CP-8050 MASTER MODULE (All versions &lt; CPCI85 V05.11). The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint. This could allow an authenticated remote attacker to traverse directories on the system and download arbitrary files. By exploring active session IDs, the vulnerability could potentially be leveraged to escalate privileges to the administrator role.</p> <p>A vulnerability has been identified in CP-8031 MASTER MODULE (All versions &lt; CPCI85 V05.11), CP-8050 MASTER MODULE (All versions &lt; CPCI85 V05.11). The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint. This could allow an authenticated remote attacker to traverse directories on the system and download arbitrary files. By exploring active session IDs, the vulnerability could potentially be leveraged to escalate privileges to the administrator role.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-42796 https://cve.radiocsirt.org/vuln/ghsa-fvx8-3v89-2x6h <p>A vulnerability has been identified in CP-8031 MASTER MODULE (All versions &lt; CPCI85 V05.11), CP-8050 MASTER MODULE (All versions &lt; CPCI85 V05.11). The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint.</p> <p>This could allow an authenticated remote attacker to traverse directories on the system and download arbitrary files. By exploring active session IDs, the vulnerability could potentially be leveraged to escalate privileges to the administrator role.</p> <p>A vulnerability has been identified in CP-8031 MASTER MODULE (All versions &lt; CPCI85 V05.11), CP-8050 MASTER MODULE (All versions &lt; CPCI85 V05.11). The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint.</p> <p>This could allow an authenticated remote attacker to traverse directories on the system and download arbitrary files. By exploring active session IDs, the vulnerability could potentially be leveraged to escalate privileges to the administrator role.</p> https://cve.radiocsirt.org/vuln/ghsa-fvx8-3v89-2x6h https://cve.radiocsirt.org/vuln/gsd-2023-42796 gsd-2023-42796 https://cve.radiocsirt.org/vuln/gsd-2023-42796 https://cve.radiocsirt.org/vuln/icsa-23-285-03 <p>The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint. This could allow an authenticated remote attacker to traverse directories on the system and download arbitrary files. By exploring active session IDs, the vulnerability could potentially be leveraged to escalate privileges to the administrator role.</p> <p>The web server of affected devices fails to properly sanitize user input for the /sicweb-ajax/tmproot/ endpoint. This could allow an authenticated remote attacker to traverse directories on the system and download arbitrary files. By exploring active session IDs, the vulnerability could potentially be leveraged to escalate privileges to the administrator role.</p> https://cve.radiocsirt.org/vuln/icsa-23-285-03 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2603 <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Siemens SICAM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.</p> <p>Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Siemens SICAM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2603