https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 19:28:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02086 bdu:2024-02086 https://cve.radiocsirt.org/vuln/bdu:2024-02086 https://cve.radiocsirt.org/vuln/euvd-2026-158412 EUVD-2026-158412 https://cve.radiocsirt.org/vuln/euvd-2026-158412 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25830 <p>F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this, by sending a URI that contains the path of the configuration file. A successful exploit could allow the attacker to extract the root and admin password.</p> <p>F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this, by sending a URI that contains the path of the configuration file. A successful exploit could allow the attacker to extract the root and admin password.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-25830 https://cve.radiocsirt.org/vuln/ghsa-h8r9-fvmc-wrrc <p>F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this, by sending a URI that contains the path of the configuration file. A successful exploit could allow the attacker to extract the root and admin password.</p> <p>F-logic DataCube3 v1.0 is vulnerable to Incorrect Access Control due to an improper directory access restriction. An unauthenticated, remote attacker can exploit this, by sending a URI that contains the path of the configuration file. A successful exploit could allow the attacker to extract the root and admin password.</p> https://cve.radiocsirt.org/vuln/ghsa-h8r9-fvmc-wrrc https://cve.radiocsirt.org/vuln/gsd-2024-25830 gsd-2024-25830 https://cve.radiocsirt.org/vuln/gsd-2024-25830 https://cve.radiocsirt.org/vuln/jvndb-2024-003187 <p>DataCube provided by Field Logic Inc. contains multiple vulnerabilities listed below. * Direct Request (&#39;Forced Browsing&#39;) (CWE-425) - CVE-2024-25830 * Reflected cross-site scripting (CWE-79) - CVE-2024-25831 * Unrestricted upload of file with dangerous type (CWE-434) - CVE-2024-25832 * SQL injection (CWE-89) - CVE-2024-25833 CVE-2024-25830, CVE-2024-25831, CVE-2024-25832, CVE-2024-25833 Thomas J. Knudsen and Samy Younsi of NeroTeam Security Labs reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. CVE-2024-25832 CV3TR4CK reported this vulnerability to JPCERT/CC during the coordination based on the above report.</p> <p>DataCube provided by Field Logic Inc. contains multiple vulnerabilities listed below. * Direct Request (&#39;Forced Browsing&#39;) (CWE-425) - CVE-2024-25830 * Reflected cross-site scripting (CWE-79) - CVE-2024-25831 * Unrestricted upload of file with dangerous type (CWE-434) - CVE-2024-25832 * SQL injection (CWE-89) - CVE-2024-25833 CVE-2024-25830, CVE-2024-25831, CVE-2024-25832, CVE-2024-25833 Thomas J. Knudsen and Samy Younsi of NeroTeam Security Labs reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. CVE-2024-25832 CV3TR4CK reported this vulnerability to JPCERT/CC during the coordination based on the above report.</p> https://cve.radiocsirt.org/vuln/jvndb-2024-003187