https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 10:16:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06524 bdu:2025-06524 https://cve.radiocsirt.org/vuln/bdu:2025-06524 https://cve.radiocsirt.org/vuln/cnvd-2025-10580 cnvd-2025-10580 https://cve.radiocsirt.org/vuln/cnvd-2025-10580 https://cve.radiocsirt.org/vuln/euvd-2026-239139 EUVD-2026-239139 https://cve.radiocsirt.org/vuln/euvd-2026-239139 https://cve.radiocsirt.org/vuln/fkie_cve-2025-26390 <p>A vulnerability has been identified in OZW672 (All versions &lt; V6.0), OZW772 (All versions &lt; V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.</p> <p>A vulnerability has been identified in OZW672 (All versions &lt; V6.0), OZW772 (All versions &lt; V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-26390 https://cve.radiocsirt.org/vuln/ghsa-cx4x-4wcx-cq8q <p>A vulnerability has been identified in OZW672 (All versions &lt; V6.0), OZW772 (All versions &lt; V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.</p> <p>A vulnerability has been identified in OZW672 (All versions &lt; V6.0), OZW772 (All versions &lt; V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.</p> https://cve.radiocsirt.org/vuln/ghsa-cx4x-4wcx-cq8q https://cve.radiocsirt.org/vuln/icsa-25-135-10 <p>The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.</p> <p>The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.</p> https://cve.radiocsirt.org/vuln/icsa-25-135-10