Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 02:25:54 +0000 EUVD-2026-200304 https://cve.radiocsirt.org/vuln/euvd-2026-200304 EUVD-2026-200304 https://cve.radiocsirt.org/vuln/euvd-2026-200304 fkie_cve-2023-27195 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27195 <p>Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&amp;uuid= to retrieve the last registration access code and use this access code to register a valid account. via a PUT /inc/tm_ajax.msw request. If the access code was used to create an Administrator account, attackers are also able to register new Administrator accounts with full privileges.</p> <p>Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&amp;uuid= to retrieve the last registration access code and use this access code to register a valid account. via a PUT /inc/tm_ajax.msw request. If the access code was used to create an Administrator account, attackers are also able to register new Administrator accounts with full privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-27195 GHSA-783g-8xvm-vx62 https://cve.radiocsirt.org/vuln/ghsa-783g-8xvm-vx62 <p>Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&amp;uuid= to retrieve the last registration access code and use this access code to register a valid account. via a PUT /inc/tm_ajax.msw request. If the access code was used to create an Administrator account, attackers are also able to register new Administrator accounts with full privileges.</p> <p>Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&amp;uuid= to retrieve the last registration access code and use this access code to register a valid account. via a PUT /inc/tm_ajax.msw request. If the access code was used to create an Administrator account, attackers are also able to register new Administrator accounts with full privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-783g-8xvm-vx62 gsd-2023-27195 https://cve.radiocsirt.org/vuln/gsd-2023-27195 gsd-2023-27195 https://cve.radiocsirt.org/vuln/gsd-2023-27195