<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 21:52:48 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-3467 — Deserialization of Untrusted Data in AVEVA PI Asset Framework Client</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-3467</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AVEVA PI Asset Framework Client, aveva pi_asset_framework_client&lt;/p&gt;
&lt;p&gt;There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AVEVA PI Asset Framework Client, aveva pi_asset_framework_client&lt;/p&gt;
&lt;p&gt;There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-3467</guid>
    </item>
    <item>
      <title>ICSA-24-163-03 — AVEVA PI Asset Framework Client</title>
      <link>https://vulnerability.circl.lu/vuln/icsa-24-163-03</link>
      <description>&lt;p&gt;There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System Explorer environment under the privileges of an interactive user that was socially engineered to import XML supplied by an attacker.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/icsa-24-163-03</guid>
    </item>
  </channel>
</rss>
