<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>National Cyber Security Centre SK-CERT — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/sk-cert" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by National Cyber Security Centre SK-CERT (sk-cert).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/sk-cert.png</url>
      <title>National Cyber Security Centre SK-CERT — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-8993 · 6.5 MEDIUM 🌩️ — Improper URL Handler Processing in D.Launcher 2 enables NTLM Credential Disclosure and SSRF attacks</title>
      <link>https://vulnogram.org/CVE-2026-8993</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-8993</guid>
      <description>D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability. Application registers multiple custom URL handlers that could be exploited to initiate full NTLM autentication or SMB connection to attacker…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 02 Jun 2026 11:13:40 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-8931 · 9.4 CRITICAL 🌩️ — Critical RCE vulnerability in Disig Web Signer</title>
      <link>https://vulnogram.org/CVE-2026-8931</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-8931</guid>
      <description>A critical Remote Code Execution (RCE) vulnerability exists in Disig Web Signer versions 2.0.3 through 2.5.3.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 01 Jun 2026 14:31:15 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-3511 · 8.6 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2026-3511</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-3511</guid>
      <description>Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticated attacker to conduct SSRF (Server Side Request Forgery) attacks and obtain unauthorized access to local fi…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 19 Mar 2026 11:25:44 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-1077 · 9.5 CRITICAL 🌩️ — Remote Code Execution vulnerability in IBL Software Engineering Visual Weather and derived products (NAMIS, Aero Weather, Satellite Weather)</title>
      <link>https://vulnogram.org/CVE-2025-1077</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-1077</guid>
      <description>A security vulnerability has been identified in the IBL Software Engineering Visual Weather and derived products (NAMIS, Aero Weather, Satellite Weather). The vulnerability is present in the Product Delivery Service (PDS) component in specific server…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 07 Feb 2025 08:32:01 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-3263 · 9.8 CRITICAL 🌩️ — Improper authentication in YMS VIS Pro</title>
      <link>https://vulnogram.org/CVE-2024-3263</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-3263</guid>
      <description>YMS VIS Pro is an information system for veterinary and food administration, veterinarians and farm. Due to a combination of improper method for system credentials generation and weak password policy, passwords can be easily guessed and enumerated th…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 13 May 2024 09:17:12 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-3612 · 8.2 HIGH 🌩️ — Unprotected WebView access in Govee Home App</title>
      <link>https://vulnogram.org/CVE-2023-3612</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-3612</guid>
      <description>Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displayi…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 11 Sep 2023 09:04:09 GMT</pubDate>
    </item>
  </channel>
</rss>
