https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:40:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08016 bdu:2023-08016 https://cve.radiocsirt.org/vuln/bdu:2023-08016 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0935 certfr-2023-avi-0935 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0935 https://cve.radiocsirt.org/vuln/cnvd-2023-86336 cnvd-2023-86336 https://cve.radiocsirt.org/vuln/cnvd-2023-86336 https://cve.radiocsirt.org/vuln/euvd-2026-209572 EUVD-2026-209572 https://cve.radiocsirt.org/vuln/euvd-2026-209572 https://cve.radiocsirt.org/vuln/fkie_cve-2023-46098 <p>A vulnerability has been identified in SIMATIC PCS neo (All versions &lt; V4.1). When accessing the Information Server from affected products, the products use an overly permissive CORS policy. This could allow an attacker to trick a legitimate user to trigger unwanted behavior.</p> <p>A vulnerability has been identified in SIMATIC PCS neo (All versions &lt; V4.1). When accessing the Information Server from affected products, the products use an overly permissive CORS policy. This could allow an attacker to trick a legitimate user to trigger unwanted behavior.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-46098 https://cve.radiocsirt.org/vuln/ghsa-qgvx-gh8h-gmqj <p>A vulnerability has been identified in SIMATIC PCS neo (All versions &lt; V4.1). When accessing the Information Server from affected products, the products use an overly permissive CORS policy. This could allow an attacker to trick a legitimate user to trigger unwanted behavior.</p> <p>A vulnerability has been identified in SIMATIC PCS neo (All versions &lt; V4.1). When accessing the Information Server from affected products, the products use an overly permissive CORS policy. This could allow an attacker to trick a legitimate user to trigger unwanted behavior.</p> https://cve.radiocsirt.org/vuln/ghsa-qgvx-gh8h-gmqj https://cve.radiocsirt.org/vuln/gsd-2023-46098 gsd-2023-46098 https://cve.radiocsirt.org/vuln/gsd-2023-46098 https://cve.radiocsirt.org/vuln/icsa-23-320-06 <p>The PUD Manager of affected products does not properly authenticate users in the PUD Manager web service. This could allow an unauthenticated adjacent attacker to generate a privileged token and upload additional documents. The PUD Manager of affected products does not properly neutralize user provided inputs. This could allow an authenticated adjacent attacker to execute SQL statements in the underlying database. When accessing the Information Server from affected products, the products use an overly permissive CORS policy. This could allow an attacker to trick a legitimate user to trigger unwanted behavior. There is a stored cross-site scripting vulnerability in the Administration Console of the affected product, that could allow an attacker with high privileges to inject Javascript code into the application that is later executed by another legitimate user.</p> <p>The PUD Manager of affected products does not properly authenticate users in the PUD Manager web service. This could allow an unauthenticated adjacent attacker to generate a privileged token and upload additional documents. The PUD Manager of affected products does not properly neutralize user provided inputs. This could allow an authenticated adjacent attacker to execute SQL statements in the underlying database. When accessing the Information Server from affected products, the products use an overly permissive CORS policy. This could allow an attacker to trick a legitimate user to trigger unwanted behavior. There is a stored cross-site scripting vulnerability in the Administration Console of the affected product, that could allow an attacker with high privileges to inject Javascript code into the application that is later executed by another legitimate user.</p> https://cve.radiocsirt.org/vuln/icsa-23-320-06