https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 21:21:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-00935 bdu:2024-00935 https://cve.radiocsirt.org/vuln/bdu:2024-00935 https://cve.radiocsirt.org/vuln/euvd-2026-200317 EUVD-2026-200317 https://cve.radiocsirt.org/vuln/euvd-2026-200317 https://cve.radiocsirt.org/vuln/fkie_cve-2024-22016 <p>In Rapid Software LLC&#39;s Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation.</p> <p>In Rapid Software LLC&#39;s Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-22016 https://cve.radiocsirt.org/vuln/ghsa-2rrv-22x6-4f23 <p>In Rapid Software LLC&#39;s Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation.</p> <p>In Rapid Software LLC&#39;s Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation.</p> https://cve.radiocsirt.org/vuln/ghsa-2rrv-22x6-4f23 https://cve.radiocsirt.org/vuln/gsd-2024-22016 gsd-2024-22016 https://cve.radiocsirt.org/vuln/gsd-2024-22016 https://cve.radiocsirt.org/vuln/icsa-24-011-03 <p>By utilizing a Zip Slip vulnerability in the unpacking routine, an attacker can supply a malicious configuration file to achieve remote code execution. By appending path traversal characters to the filename when using a specific command, an attacker can read arbitrary files from the system. Due to improper permissions configuration, any authenticated user on the server may write directly to the Scada directory. This may allow privilege escalation. The affected product may allow open redirects through the login page. This may redirect users to malicious webpages. The affected product uses hard-coded credentials, which may allow an attacker to connect to a specific port. The affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them. The affected product responds back with an error message containing sensitive data if it recieves a specific malformed request.</p> <p>By utilizing a Zip Slip vulnerability in the unpacking routine, an attacker can supply a malicious configuration file to achieve remote code execution. By appending path traversal characters to the filename when using a specific command, an attacker can read arbitrary files from the system. Due to improper permissions configuration, any authenticated user on the server may write directly to the Scada directory. This may allow privilege escalation. The affected product may allow open redirects through the login page. This may redirect users to malicious webpages. The affected product uses hard-coded credentials, which may allow an attacker to connect to a specific port. The affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them. The affected product responds back with an error message containing sensitive data if it recieves a specific malformed request.</p> https://cve.radiocsirt.org/vuln/icsa-24-011-03