<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 19:59:00 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2026-27875</title>
      <link>https://db.gcve.eu/vuln/fkie_cve-2026-27875</link>
      <description>&lt;p&gt;Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data.&lt;/p&gt;
&lt;p&gt;This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data.&lt;/p&gt;
&lt;p&gt;This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/fkie_cve-2026-27875</guid>
    </item>
    <item>
      <title>GHSA-64vf-r2xh-37w2</title>
      <link>https://db.gcve.eu/vuln/ghsa-64vf-r2xh-37w2</link>
      <description>&lt;p&gt;Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data.&lt;/p&gt;
&lt;p&gt;This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data.&lt;/p&gt;
&lt;p&gt;This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/ghsa-64vf-r2xh-37w2</guid>
    </item>
    <item>
      <title>ICSA-26-232-01 — Johnson Controls Simplex Incident Manager</title>
      <link>https://db.gcve.eu/vuln/icsa-26-232-01</link>
      <description>&lt;p&gt;The Simplex Incident Manager application stores user credentials (such as passwords and authentication tokens) in an unencrypted form within system memory while running. This exposes sensitive information to potential extraction by anyone with local access to the system, including attackers leveraging memory-dumping tools or insiders with elevated privileges.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;The Simplex Incident Manager application stores user credentials (such as passwords and authentication tokens) in an unencrypted form within system memory while running. This exposes sensitive information to potential extraction by anyone with local access to the system, including attackers leveraging memory-dumping tools or insiders with elevated privileges.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/icsa-26-232-01</guid>
    </item>
    <item>
      <title>WID-SEC-W-2026-0899 — Grafana: Mehrere Schwachstellen</title>
      <link>https://db.gcve.eu/vuln/wid-sec-w-2026-0899</link>
      <description>&lt;p&gt;Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um einen Denial of Service Angriff durchzuführen, Code auszuführen oder Informationen offenzulegen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um einen Denial of Service Angriff durchzuführen, Code auszuführen oder Informationen offenzulegen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/wid-sec-w-2026-0899</guid>
    </item>
  </channel>
</rss>
