CVE-2026-1469: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS in RLE NOVA's PlanManager. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting malicious payload through the ‘comment’ and ‘brand’ parameters in ‘/index.php’. The payload is stored by the application and subsequentl...

RLE NOVA PlanManager Cross-Site Script Vulnerability

RLE NOVA PlanManager is a planning and scheduling management software developed by the Spanish company RLE NOVA. RLE NOVA PlanManager has a cross-site scripting vulnerability, which stems from improper cleaning of the comment and brand parameters in the index.php file. This vulnerability may lead...

EUVD-2015-3982

Malware in sbrugna...

Design/Logic Flaw

RLE Nova-Wind Turbine HMI devices store cleartext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2015-3951

The CVE concerns the Nova-Wind Turbine HMI from RLE International GmbH. The vulnerability stems from plaintext storage of credentials in the HMI, enabling a remote attacker who can access the credential file to obtain sensitive information and authenticate to the device. Reported impact includes ...

CVE-2015-3951

RLE Nova-Wind Turbine HMI devices store cleartext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2015-6356

Name of the Vulnerable Software and Affected Versions RLE Nova-Wind Turbine HMI devices affected versions not specified Description The issue concerns the storage of cleartext credentials in RLE Nova-Wind Turbine HMI devices. This allows remote attackers to obtain sensitive information via...

CVE-2015-3951: Exposure of Sensitive Information to an Unauthorized Actor

RLE Nova-Wind Turbine HMI devices store cleartext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...