https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 01:52:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-02926 bdu:2022-02926 https://cve.radiocsirt.org/vuln/bdu:2022-02926 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0014 certfr-2023-avi-0014 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0014 https://cve.radiocsirt.org/vuln/cnvd-2023-94706 cnvd-2023-94706 https://cve.radiocsirt.org/vuln/cnvd-2023-94706 https://cve.radiocsirt.org/vuln/euvd-2026-230914 EUVD-2026-230914 https://cve.radiocsirt.org/vuln/euvd-2026-230914 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1467 <p>Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.</p> <p>Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-1467 https://cve.radiocsirt.org/vuln/ghsa-2hvg-pfw9-r56c <p>Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.</p> <p>Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.</p> https://cve.radiocsirt.org/vuln/ghsa-2hvg-pfw9-r56c https://cve.radiocsirt.org/vuln/gsd-2022-1467 gsd-2022-1467 https://cve.radiocsirt.org/vuln/gsd-2022-1467 https://cve.radiocsirt.org/vuln/icsa-22-130-05 <p>Windows OS can be configured to overlay a language bar on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.CVE-2022-1467 has been assigned to this vulnerability. A CVSS v3 base score of 7.4 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L).</p> <p>Windows OS can be configured to overlay a language bar on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.CVE-2022-1467 has been assigned to this vulnerability. A CVSS v3 base score of 7.4 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L).</p> https://cve.radiocsirt.org/vuln/icsa-22-130-05 https://cve.radiocsirt.org/vuln/sevd-2023-010-04 <p>Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power SCADA Anywhere product. EcoStruxure™ Power SCADA Anywhere is an on-premises software that provides remote web browser access to the EcoStruxure Power Operation desktop HMI client application and its operator interface. Failure to apply with the mitigations provided below may risk an authenticated user to escape from the context of EcoStruxure™ Power SCADA Anywhere into the Operating System (OS), which could result in arbitrary OS commands being executed on the system.</p> <p>Schneider Electric is aware of a vulnerability in its EcoStruxure™ Power SCADA Anywhere product. EcoStruxure™ Power SCADA Anywhere is an on-premises software that provides remote web browser access to the EcoStruxure Power Operation desktop HMI client application and its operator interface. Failure to apply with the mitigations provided below may risk an authenticated user to escape from the context of EcoStruxure™ Power SCADA Anywhere into the Operating System (OS), which could result in arbitrary OS commands being executed on the system.</p> https://cve.radiocsirt.org/vuln/sevd-2023-010-04