https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:03:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-03212 bdu:2023-03212 https://cve.radiocsirt.org/vuln/bdu:2023-03212 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0452 certfr-2023-avi-0452 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0452 https://cve.radiocsirt.org/vuln/euvd-2026-208763 EUVD-2026-208763 https://cve.radiocsirt.org/vuln/euvd-2026-208763 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1049 <p>A CWE-94: Improper Control of Generation of Code (&#39;Code Injection&#39;) vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI.</p> <p>A CWE-94: Improper Control of Generation of Code (&#39;Code Injection&#39;) vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-1049 https://cve.radiocsirt.org/vuln/ghsa-63c6-hm8j-v6m9 <p>A CWE-94: Improper Control of Generation of Code (&#39;Code Injection&#39;) vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI.</p> <p>A CWE-94: Improper Control of Generation of Code (&#39;Code Injection&#39;) vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI.</p> https://cve.radiocsirt.org/vuln/ghsa-63c6-hm8j-v6m9 https://cve.radiocsirt.org/vuln/gsd-2023-1049 gsd-2023-1049 https://cve.radiocsirt.org/vuln/gsd-2023-1049 https://cve.radiocsirt.org/vuln/icsa-23-180-02 <p>Schneider Electric EcoStruxure operator Terminal Expert versions 3.3 SP1 and prior are vulnerable to a code injection attack that could allow an attacker to execute arbitrary code and gain access to all information on the machine.</p> <p>Schneider Electric EcoStruxure operator Terminal Expert versions 3.3 SP1 and prior are vulnerable to a code injection attack that could allow an attacker to execute arbitrary code and gain access to all information on the machine.</p> https://cve.radiocsirt.org/vuln/icsa-23-180-02 https://cve.radiocsirt.org/vuln/sevd-2023-164-01 <p>Schneider Electric is aware of a vulnerability in its EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products. The EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products are HMI configuration software supporting gestures and UI designs. Failure to apply the remediation provided below may risk unauthorized code execution by a local user of the Windows engineering workstation, which could result in loss of availability, confidentiality, and integrity of the workstation where EcoStruxure™ Operator Terminal Expert or Pro-face BLUE runtime is installed.</p> <p>Schneider Electric is aware of a vulnerability in its EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products. The EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products are HMI configuration software supporting gestures and UI designs. Failure to apply the remediation provided below may risk unauthorized code execution by a local user of the Windows engineering workstation, which could result in loss of availability, confidentiality, and integrity of the workstation where EcoStruxure™ Operator Terminal Expert or Pro-face BLUE runtime is installed.</p> https://cve.radiocsirt.org/vuln/sevd-2023-164-01