https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:07:15 +0000 https://cve.radiocsirt.org/vuln/vde-2025-066 <p>A security researcher discovered a Directory Traversal vulnerability in Sunny Boy 3, which allows remote attackers to access sensitive information. The vulnerability is already fixed since January 2021 with version 3.10.27.R.</p> <p>A security researcher discovered a Directory Traversal vulnerability in Sunny Boy 3, which allows remote attackers to access sensitive information. The vulnerability is already fixed since January 2021 with version 3.10.27.R.</p> https://cve.radiocsirt.org/vuln/vde-2025-066 Wed, 27 Aug 2025 08:00:00 +0000 https://cve.radiocsirt.org/vuln/vde-2025-050 <p>A security researcher discovered a data disclosure vulnerability in Sunny Portal powered by ennexOS, ennexos.sunnyportal.com. A regularly authenticated user can receive the name of an other registered Sunny Portal user by entering the email address of this registered user.</p> <p>A security researcher discovered a data disclosure vulnerability in Sunny Portal powered by ennexOS, ennexos.sunnyportal.com. A regularly authenticated user can receive the name of an other registered Sunny Portal user by entering the email address of this registered user.</p> https://cve.radiocsirt.org/vuln/vde-2025-050 Tue, 19 Aug 2025 10:00:00 +0000 https://cve.radiocsirt.org/vuln/vde-2024-075 <p>A security researcher discovered that in the affected products a clickjacking vulnerability in the web frontend exists. An attacker could lure the user to click on a malicious website which seems to be the WebUI of the affected product. The affected products are out of support (End-of-Life 2015-12-31).</p> <p>A security researcher discovered that in the affected products a clickjacking vulnerability in the web frontend exists. An attacker could lure the user to click on a malicious website which seems to be the WebUI of the affected product. The affected products are out of support (End-of-Life 2015-12-31).</p> https://cve.radiocsirt.org/vuln/vde-2024-075 Mon, 27 Jan 2025 13:00:00 +0000 https://cve.radiocsirt.org/vuln/vde-2025-012 <p>A security researcher discovered a critical Remote Code Execution vulnerability in sunnyportal.com. An attacker could upload code instead of an image and remotely execute this code.</p> <p>A security researcher discovered a critical Remote Code Execution vulnerability in sunnyportal.com. An attacker could upload code instead of an image and remotely execute this code.</p> https://cve.radiocsirt.org/vuln/vde-2025-012 Wed, 26 Feb 2025 11:00:00 +0000 https://cve.radiocsirt.org/vuln/vde-2025-010 <p>A security researcher discovered a privilege escalation vulnerability in the demo system area of the SMA Classic Portal, www.sunnyportal.com. Only systems of other users have been affected who unintendedly and illicitly had added their non-demo systems to the demo system area.</p> <p>A security researcher discovered a privilege escalation vulnerability in the demo system area of the SMA Classic Portal, www.sunnyportal.com. Only systems of other users have been affected who unintendedly and illicitly had added their non-demo systems to the demo system area.</p> https://cve.radiocsirt.org/vuln/vde-2025-010 Tue, 13 May 2025 11:00:00 +0000 https://cve.radiocsirt.org/vuln/vde-2024-074 <p>A security researcher discovered that in the affected products an authenticated (administration privileges) SQL injection has been found on the administration panel allowing access to a database. The database that can be accessed is a log database in which measurement data are stored for a graphical representation.</p> <p>A security researcher discovered that in the affected products an authenticated (administration privileges) SQL injection has been found on the administration panel allowing access to a database. The database that can be accessed is a log database in which measurement data are stored for a graphical representation.</p> https://cve.radiocsirt.org/vuln/vde-2024-074 Wed, 27 Nov 2024 09:00:00 +0000 https://cve.radiocsirt.org/vuln/vde-2024-020 <p>A security researcher discovered a Cross Site Request Forgery (CSRF, XSRF) vulnerability in SMA Cluster Controller. The affected products are out of support (End-of-Life 2018-06-30).</p> <p>A security researcher discovered a Cross Site Request Forgery (CSRF, XSRF) vulnerability in SMA Cluster Controller. The affected products are out of support (End-of-Life 2018-06-30).</p> https://cve.radiocsirt.org/vuln/vde-2024-020 Mon, 27 Jan 2025 13:00:00 +0000