https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:55:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-221214 EUVD-2026-221214 https://cve.radiocsirt.org/vuln/euvd-2026-221214 https://cve.radiocsirt.org/vuln/fkie_cve-2025-21095 <p>Path traversal may lead to arbitrary file download. The score without least privilege principle violation is as calculated below. In combination with other issues it may facilitate further compromise of the device. Remediation in Version 6.8.0, release date: 01-Mar-25.</p> <p>Path traversal may lead to arbitrary file download. The score without least privilege principle violation is as calculated below. In combination with other issues it may facilitate further compromise of the device. Remediation in Version 6.8.0, release date: 01-Mar-25.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-21095 https://cve.radiocsirt.org/vuln/ghsa-jqfh-7gh7-3q4c <p>Path traversal may lead to arbitrary file download. The score without least privilege principle violation is as calculated below. In combination with other issues it may facilitate further compromise of the device. Remediation in Version 6.8.0, release date: 01-Mar-25.</p> <p>Path traversal may lead to arbitrary file download. The score without least privilege principle violation is as calculated below. In combination with other issues it may facilitate further compromise of the device. Remediation in Version 6.8.0, release date: 01-Mar-25.</p> https://cve.radiocsirt.org/vuln/ghsa-jqfh-7gh7-3q4c https://cve.radiocsirt.org/vuln/icsa-25-063-02 <p>Path traversal may allow remote code execution using a privileged account (requires a device admin account, which cannot be performed by a regular user). In combination with the &#39;Upload&#39; functionality this vulnerability could be used to execute an arbitrary script or possibly upload a binary. Remediation is available in Version 6.7.0 released on October 20, 2024. External XML entity injection allows the arbitrary download of files. The score without the least privilege principle violation is calculated below. In combination with other issues, it may facilitate the further compromise of the device. Remediation is available in Version 6.8.0, released on March 1, 2025. Path traversal may lead to the arbitrary download of files. The score without the least privilege principle violation is calculated below. In combination with other issues, it may facilitate the further compromise of the device. Remediation is available in Version 6.8.0, released on March 1, 2025. Path traversal may lead to the arbitrary deletion of files. The score without the least privilege principle violation is calculated below. In combination with other issues, it may facilitate the further compromise of the device. Remediation is available in Version 6.8.0, released on March 1, 2025. Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or decrypt payloads sent to the device via API calls or user authentication if the end user does not replace the…</p> <p>Path traversal may allow remote code execution using a privileged account (requires a device admin account, which cannot be performed by a regular user). In combination with the &#39;Upload&#39; functionality this vulnerability could be used to execute an arbitrary script or possibly upload a binary. Remediation is available in Version 6.7.0 released on October 20, 2024. External XML entity injection allows the arbitrary download of files. The score without the least privilege principle violation is calculated below. In combination with other issues, it may facilitate the further compromise of the device. Remediation is available in Version 6.8.0, released on March 1, 2025. Path traversal may lead to the arbitrary download of files. The score without the least privilege principle violation is calculated below. In combination with other issues, it may facilitate the further compromise of the device. Remediation is available in Version 6.8.0, released on March 1, 2025. Path traversal may lead to the arbitrary deletion of files. The score without the least privilege principle violation is calculated below. In combination with other issues, it may facilitate the further compromise of the device. Remediation is available in Version 6.8.0, released on March 1, 2025. Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or decrypt payloads sent to the device via API calls or user authentication if the end user does not replace the…</p> https://cve.radiocsirt.org/vuln/icsa-25-063-02