Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 07:35:09 +0000 CVE-2024-54005 https://cve.radiocsirt.org/vuln/cve-2024-54005 <p><strong>Affected:</strong> Siemens COMOS V10.3, Siemens COMOS V10.4.0, Siemens COMOS V10.4.1, Siemens COMOS V10.4.2, Siemens COMOS V10.4.3, Siemens COMOS V10.4.4, Siemens COMOS V10.4.4.1</p> <p>A vulnerability has been identified in COMOS V10.3 (All versions &lt; V10.3.3.5.8), COMOS V10.4.0 (All versions), COMOS V10.4.1 (All versions), COMOS V10.4.2 (All versions), COMOS V10.4.3 (All versions &lt; V10.4.3.0.47), COMOS V10.4.4 (All versions &lt; V10.4.4.2), COMOS V10.4.4.1 (All versions &lt; V10.4.4.1.21). The PDMS/E3D Engineering Interface improperly handles XML External Entity (XXE) entries when communicating with an external application. This could allow an attacker to extract any file with a known location on the user&#39;s system or accessible network folders by injecting malicious data into the communication channel between the two systems.</p> <p><strong>Affected:</strong> Siemens COMOS V10.3, Siemens COMOS V10.4.0, Siemens COMOS V10.4.1, Siemens COMOS V10.4.2, Siemens COMOS V10.4.3, Siemens COMOS V10.4.4, Siemens COMOS V10.4.4.1</p> <p>A vulnerability has been identified in COMOS V10.3 (All versions &lt; V10.3.3.5.8), COMOS V10.4.0 (All versions), COMOS V10.4.1 (All versions), COMOS V10.4.2 (All versions), COMOS V10.4.3 (All versions &lt; V10.4.3.0.47), COMOS V10.4.4 (All versions &lt; V10.4.4.2), COMOS V10.4.4.1 (All versions &lt; V10.4.4.1.21). The PDMS/E3D Engineering Interface improperly handles XML External Entity (XXE) entries when communicating with an external application. This could allow an attacker to extract any file with a known location on the user&#39;s system or accessible network folders by injecting malicious data into the communication channel between the two systems.</p> https://cve.radiocsirt.org/vuln/cve-2024-54005