https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 09:16:55 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-32363 EUVD-2026-32363 https://cve.radiocsirt.org/vuln/euvd-2026-32363 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43110 <p>An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in add_products.</p> <p>An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in add_products.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-43110 https://cve.radiocsirt.org/vuln/ghsa-r4j4-7824-8rp5 <p>An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in add_products.</p> <p>An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in add_products.</p> https://cve.radiocsirt.org/vuln/ghsa-r4j4-7824-8rp5 https://cve.radiocsirt.org/vuln/gsd-2021-43110 gsd-2021-43110 https://cve.radiocsirt.org/vuln/gsd-2021-43110 https://cve.radiocsirt.org/vuln/icsa-25-182-05 <p>The UPS management software normally allows a properly authenticated and authorized user using a web interface to configure the system to run a single OS command of the users choosing when the software detects a managed UPS is shutting down. A related critical underlying function is exposed over the network with no authentication or authorization allowing an attacker to use this to run arbitrary code immediately regardless of any managed UPS state or presence. The UPS management software is supposed to only allow a properly authenticated and authorized admin user using a web interface to configure the system. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password, view/change system configuration, enumerate connected UPS devices and shut down connected UPS devices.</p> <p>The UPS management software normally allows a properly authenticated and authorized user using a web interface to configure the system to run a single OS command of the users choosing when the software detects a managed UPS is shutting down. A related critical underlying function is exposed over the network with no authentication or authorization allowing an attacker to use this to run arbitrary code immediately regardless of any managed UPS state or presence. The UPS management software is supposed to only allow a properly authenticated and authorized admin user using a web interface to configure the system. An unauthenticated remote attacker can make changes to the system including: changing the web interface admin password, view/change system configuration, enumerate connected UPS devices and shut down connected UPS devices.</p> https://cve.radiocsirt.org/vuln/icsa-25-182-05