https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 23:39:02 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-03422 bdu:2023-03422 https://cve.radiocsirt.org/vuln/bdu:2023-03422 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0297 certfr-2023-avi-0297 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0297 https://cve.radiocsirt.org/vuln/cnvd-2023-40173 cnvd-2023-40173 https://cve.radiocsirt.org/vuln/cnvd-2023-40173 https://cve.radiocsirt.org/vuln/euvd-2026-213890 EUVD-2026-213890 https://cve.radiocsirt.org/vuln/euvd-2026-213890 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29410 <p>A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute.</p> <p>A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-29410 https://cve.radiocsirt.org/vuln/ghsa-frqc-8338-cjmx <p>A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute.</p> <p>A CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated attacker to gain the same privilege as the application on the server when a malicious payload is provided over HTTP for the server to execute.</p> https://cve.radiocsirt.org/vuln/ghsa-frqc-8338-cjmx https://cve.radiocsirt.org/vuln/gsd-2023-29410 gsd-2023-29410 https://cve.radiocsirt.org/vuln/gsd-2023-29410 https://cve.radiocsirt.org/vuln/sevd-2023-101-02 <p>Schneider Electric is aware of a vulnerability in its Conext™ Gateway/ InsightHome and InsightFacility products. The InsightHome and InsightFacility products are smart edge devices that connect customers’ Schneider Electric solar and storage systems to the Insight app. InsightHome targets the residential solar and storage market globally. InsightFacility is for large residential and commercial solar and storage systems. Conext™ Gateway was discontinued from 2019 and rebranded as InsightFacility. However, Schneider is still supporting Gateway with firmware fixes. Failure to apply the remediations provided below may risk remote code execution, which could result in an authenticated user being able to insert a backdoor into the application or could allow the extraction of private certificates.</p> <p>Schneider Electric is aware of a vulnerability in its Conext™ Gateway/ InsightHome and InsightFacility products. The InsightHome and InsightFacility products are smart edge devices that connect customers’ Schneider Electric solar and storage systems to the Insight app. InsightHome targets the residential solar and storage market globally. InsightFacility is for large residential and commercial solar and storage systems. Conext™ Gateway was discontinued from 2019 and rebranded as InsightFacility. However, Schneider is still supporting Gateway with firmware fixes. Failure to apply the remediations provided below may risk remote code execution, which could result in an authenticated user being able to insert a backdoor into the application or could allow the extraction of private certificates.</p> https://cve.radiocsirt.org/vuln/sevd-2023-101-02