<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Canon EMEA — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/canon_emea" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Canon EMEA (canon_emea).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/canon_emea.png</url>
      <title>Canon EMEA — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-92378 · 4.1 MEDIUM — uniFLOW Online Legacy UI Previous login session retained when entering Reduced Function Login</title>
      <link>https://vulnogram.org/CVE-2026-92378</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-92378</guid>
      <description>A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logo…</description>
      <category>Medium</category>
      <pubDate>Wed, 23 Sep 2026 07:22:01 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-1433 · 4.8 MEDIUM — uniFLOW Universal Login Manager (ULM) Standalone Improper Protection of Sensitive Information Leads to Information Disclosure</title>
      <link>https://vulnogram.org/CVE-2026-1433</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-1433</guid>
      <description>uniFLOW Universal Login Manager (ULM) Standalone contains an information disclosure vulnerability that may allow an authenticated administrator to access sensitive configuration information through the ULM Remote User Interface (RUI). Exploitation re…</description>
      <category>Medium</category>
      <pubDate>Mon, 06 Jul 2026 08:12:49 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-11843 · 8.8 HIGH 🌩️ — Therefore™ Online and Therefore™ On-Premises contains an account impersonation issue, which could potentially allow the attacker to access all the stored data</title>
      <link>https://vulnogram.org/CVE-2025-11843</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-11843</guid>
      <description>Therefore Corporation GmbH has recently become aware that Therefore™ Online and Therefore™ On-Premises contain an account impersonation vulnerability. A malicious user may potentially be able to impersonate the web service account or the account of a…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 31 Oct 2025 09:43:08 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-5995 · 4.6 MEDIUM — Canon EOS Webcam Utility Pro for MAC OS contains an insecure permission issue potentially leading to code execution and privilege escalation</title>
      <link>https://vulnogram.org/CVE-2025-5995</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-5995</guid>
      <description>Canon EOS Webcam Utility Pro for MAC OS version 2.3d (2.3.29) and earlier contains an improper directory permissions vulnerability. Exploitation of this vulnerability requires administrator access by a malicious user. An attacker could modify the dir…</description>
      <category>Medium</category>
      <pubDate>Thu, 26 Jun 2025 19:13:48 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-1578 · 5.3 MEDIUM — Multiple MiCard PLUS card reader dropped characters</title>
      <link>https://vulnogram.org/CVE-2024-1578</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-1578</guid>
      <description>The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fault that may result in characters randomly being dropped from some ID card reads, which would result in the wrong ID card number b…</description>
      <category>Medium</category>
      <pubDate>Mon, 16 Sep 2024 06:59:35 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-1621 · 8.3 HIGH 🌩️ — uniFLOW Online device registration susceptible to compromise</title>
      <link>https://vulnogram.org/CVE-2024-1621</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-1621</guid>
      <description>The registration process of uniFLOW Online (NT-ware product) apps, prior to and including version 2024.1.0, can be compromised when email login is enabled on the tenant. Those tenants utilising email login in combination with Microsoft Safe Links or…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 02 Sep 2024 19:53:10 GMT</pubDate>
    </item>
  </channel>
</rss>
