https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:51:35 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-229349 EUVD-2026-229349 https://cve.radiocsirt.org/vuln/euvd-2026-229349 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22372 <p>Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery. Passwords are either stored in plain text using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easily.</p> <p>This issue affects BASEC: from 14 Dec 2021.</p> <p>Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery. Passwords are either stored in plain text using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easily.</p> <p>This issue affects BASEC: from 14 Dec 2021.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-22372 https://cve.radiocsirt.org/vuln/ghsa-p8mv-f94r-2px4 <p>Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery. Passwords are either stored in plain text using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easily.</p> <p>This issue affects BASEC: from 14 Dec 2021.</p> <p>Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery. Passwords are either stored in plain text using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easily.</p> <p>This issue affects BASEC: from 14 Dec 2021.</p> https://cve.radiocsirt.org/vuln/ghsa-p8mv-f94r-2px4 https://cve.radiocsirt.org/vuln/va-25-104-01 <p>An Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in the SicommNet BASEC (SaaS) login page allows an unauthenticated remote attacker to bypass authentication and execute arbitrary SQL commands. This issue was discovered on 2021-12-14 and fixed on 2025-04-16. An Insufficiently Protected Credentials vulnerability in SicommNet BASEC (SaaS) allows password recovery. Passwords are either stored in plain text or using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easily. This issue was discovered on 2021-12-14. An Improper Neutralization of Input During Web Page Generation (XSS or &#39;Cross-site Scripting&#39;) vulnerability in SicommNet BASEC (SaaS) allows reflected XSS, XSS through HTTP query strings, rendering of arbitrary HTML, and alternation of CSS styles. This issue was discovered on 2021-12-14.</p> <p>An Improper Neutralization of Special Elements used in an SQL Command (&#39;SQL Injection&#39;) vulnerability in the SicommNet BASEC (SaaS) login page allows an unauthenticated remote attacker to bypass authentication and execute arbitrary SQL commands. This issue was discovered on 2021-12-14 and fixed on 2025-04-16. An Insufficiently Protected Credentials vulnerability in SicommNet BASEC (SaaS) allows password recovery. Passwords are either stored in plain text or using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easily. This issue was discovered on 2021-12-14. An Improper Neutralization of Input During Web Page Generation (XSS or &#39;Cross-site Scripting&#39;) vulnerability in SicommNet BASEC (SaaS) allows reflected XSS, XSS through HTTP query strings, rendering of arbitrary HTML, and alternation of CSS styles. This issue was discovered on 2021-12-14.</p> https://cve.radiocsirt.org/vuln/va-25-104-01