https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:57:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-00141 bdu:2024-00141 https://cve.radiocsirt.org/vuln/bdu:2024-00141 https://cve.radiocsirt.org/vuln/cnvd-2025-21599 cnvd-2025-21599 https://cve.radiocsirt.org/vuln/cnvd-2025-21599 https://cve.radiocsirt.org/vuln/euvd-2026-10559 EUVD-2026-10559 https://cve.radiocsirt.org/vuln/euvd-2026-10559 https://cve.radiocsirt.org/vuln/fkie_cve-2023-51570 <p>Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the RMI interface, which listens on TCP port 41009 by default. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-21012.</p> <p>Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the RMI interface, which listens on TCP port 41009 by default. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-21012.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-51570 https://cve.radiocsirt.org/vuln/ghsa-337x-469w-f426 <p>Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the RMI interface, which listens on TCP port 41009 by default. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-21012.</p> <p>Voltronic Power ViewPower Pro Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the RMI interface, which listens on TCP port 41009 by default. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-21012.</p> https://cve.radiocsirt.org/vuln/ghsa-337x-469w-f426 https://cve.radiocsirt.org/vuln/gsd-2023-51570 gsd-2023-51570 https://cve.radiocsirt.org/vuln/gsd-2023-51570 https://cve.radiocsirt.org/vuln/icsa-24-023-03 <p>The affected product deserializes untrusted data without sufficiently verifying the resulting data will be valid. When a specific service of the affected product receives a certain message from an unauthenticated user, that process may stop. The affected product is vulnerable to an OS command injection, which may allow remote code execution on the underlying operating system. The affected product allows an unauthenticated user to invoke a method that may modify the administrator account password.</p> <p>The affected product deserializes untrusted data without sufficiently verifying the resulting data will be valid. When a specific service of the affected product receives a certain message from an unauthenticated user, that process may stop. The affected product is vulnerable to an OS command injection, which may allow remote code execution on the underlying operating system. The affected product allows an unauthenticated user to invoke a method that may modify the administrator account password.</p> https://cve.radiocsirt.org/vuln/icsa-24-023-03