https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:35:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-7581 EUVD-2026-7581 https://cve.radiocsirt.org/vuln/euvd-2026-7581 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5935 <p>When configuring Arc (e.g. during the first setup), a local web interface is provided to ease the configuration process. Such web interface lacks authentication and may thus be abused by a local attacker or malware running on the machine itself.</p> <p>A malicious local user or process, during a window of opportunity when the local web interface is active, may be able to extract sensitive information or change Arc&#39;s configuration. This could also lead to arbitrary code execution if a malicious update package is installed.</p> <p>When configuring Arc (e.g. during the first setup), a local web interface is provided to ease the configuration process. Such web interface lacks authentication and may thus be abused by a local attacker or malware running on the machine itself.</p> <p>A malicious local user or process, during a window of opportunity when the local web interface is active, may be able to extract sensitive information or change Arc&#39;s configuration. This could also lead to arbitrary code execution if a malicious update package is installed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-5935 https://cve.radiocsirt.org/vuln/ghsa-rc98-whmj-qg8f <p>When configuring Arc (e.g. during the first setup), a local web interface is provided to ease the configuration process. Such web interface lacks authentication and may thus be abused by a local attacker or malware running on the machine itself.</p> <p>A malicious local user or process, during a window of opportunity when the local web interface is active, may be able to extract sensitive information or change Arc&#39;s configuration. This could also lead to arbitrary code execution if a malicious update package is installed.</p> <p>When configuring Arc (e.g. during the first setup), a local web interface is provided to ease the configuration process. Such web interface lacks authentication and may thus be abused by a local attacker or malware running on the machine itself.</p> <p>A malicious local user or process, during a window of opportunity when the local web interface is active, may be able to extract sensitive information or change Arc&#39;s configuration. This could also lead to arbitrary code execution if a malicious update package is installed.</p> https://cve.radiocsirt.org/vuln/ghsa-rc98-whmj-qg8f https://cve.radiocsirt.org/vuln/gsd-2023-5935 gsd-2023-5935 https://cve.radiocsirt.org/vuln/gsd-2023-5935 https://cve.radiocsirt.org/vuln/nn-2023:13-01 <p>When configuring Arc (e.g. during the first setup), a local web interface is provided to ease the configuration process. Such web interface lacks authentication and may thus be abused by a local attacker or malware running on the machine itself.</p> <p>When configuring Arc (e.g. during the first setup), a local web interface is provided to ease the configuration process. Such web interface lacks authentication and may thus be abused by a local attacker or malware running on the machine itself.</p> https://cve.radiocsirt.org/vuln/nn-2023:13-01