<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>SCHUTZWERK GmbH — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/schutzwerk" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by SCHUTZWERK GmbH (schutzwerk).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/schutzwerk.png</url>
      <title>SCHUTZWERK GmbH — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2025-7062 · 5.2 MEDIUM — Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education</title>
      <link>https://vulnogram.org/CVE-2025-7062</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-7062</guid>
      <description>A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module `h5p-nodejs-library` by Lumi Education UG in versions up to and including 10.0.4. The library allows users to upload H5P content that contains malicious JavaScrip…</description>
      <category>Medium</category>
      <pubDate>Wed, 09 Sep 2026 06:14:22 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-4994 · 8.7 HIGH — Authentication Bypass for SafeLine SL6 and SL6+</title>
      <link>https://vulnogram.org/CVE-2025-4994</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-4994</guid>
      <description>The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device&apos;s configuration service…</description>
      <category>High</category>
      <pubDate>Mon, 22 Jun 2026 08:10:29 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-13971 · 7.7 HIGH 🌩️ — Arbitrary File Read and Server Side Request Forgery via XML External Entities in Lobster_pro</title>
      <link>https://vulnogram.org/CVE-2024-13971</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-13971</guid>
      <description>Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET re…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 30 Apr 2026 12:11:46 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-39847 · 8.7 HIGH 🌩️ — Arbitrary File Read and Server Side Request Forgery via XML External Entities in 4D Server SOAP</title>
      <link>https://vulnogram.org/CVE-2024-39847</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-39847</guid>
      <description>Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 30 Apr 2026 07:10:17 GMT</pubDate>
    </item>
  </channel>
</rss>
