Lucene search
+L

22 matches found

NVD
NVD
•added 2026/11/12 7:16 a.m.•9 views

CVE-2026-8332

A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials...

8.8CVSS0.00282EPSS
SaveExploits0References2
NVD
NVD
•added 2026/11/12 7:16 a.m.•9 views

CVE-2026-8331

An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...

8.8CVSS0.00563EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/11/12 6:21 a.m.•7 views

EUVD-2026-124293

An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...

8.8CVSS6.5AI score0.00563EPSS
SaveExploits0References2
CVE
CVE
•added 2026/11/12 6:21 a.m.•14 views

CVE-2026-8331

The Microchip TimePictra platform is susceptible to remote code execution due to an unrestricted upload of files with dangerous types . The vulnerability occurs because certain functionalities are not properly constrained by access control lists , allowing an attacker to upload malicious files. W...

8.8CVSS6.5AI score0.00563EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/12 6:21 a.m.•25 views

CVE-2026-8331 TimePictra ermote code execution via file upload

An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...

8.8CVSS0.00563EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/11/12 6:19 a.m.•8 views

EUVD-2026-124292

A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials...

8.8CVSS6AI score0.00282EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/12 12:00 a.m.•6 views

CVE-2026-8331: Microchip TimePictra: An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows…

An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...

8.8CVSS6.6AI score0.00563EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/12 12:00 a.m.•4 views

PT-2026-145722

A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials...

8.8CVSS6AI score0.00282EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/12 12:00 a.m.•5 views

CVE-2026-8332: Microchip TimePictra: A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to…

A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials...

8.8CVSS6AI score0.00282EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/12 12:00 a.m.•4 views

PT-2026-145721

An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...

8.8CVSS6.6AI score0.00563EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/12 12:00 a.m.•2 views

CVE-2026-8333: Microchip TimePictra: A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated,…

A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page...

9.4CVSS5.7AI score0.00366EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/02/28 12:30 p.m.•36 views

EUVD-2026-9102

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

9.3CVSS5.8AI score0.00177EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/02/28 12:30 p.m.•33 views

EUVD-2026-9101

Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2...

9.3CVSS5.8AI score0.00285EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/28 12:16 p.m.•35 views

CVE-2026-3010

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

9.3CVSS0.00177EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/02/28 12:16 p.m.•28 views

CVE-2026-3010

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

6.1CVSS5.8AI score0.00177EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/28 11:45 a.m.•15 views

CVE-2026-3010 TimePictra Stored Cross-Site Scripting

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

9.3CVSS5.8AI score0.00177EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/28 11:45 a.m.•73 views

CVE-2026-3010

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

9.3CVSS5.8AI score0.00177EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/28 12:00 a.m.•11 views

CVE-2026-3010: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

9.3CVSS5.8AI score0.00177EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/28 12:00 a.m.•61 views

PT-2026-22467

Name of the Vulnerable Software and Affected Versions Microchip TimePictra versions 11.0 through 11.3 SP2 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, also known as Cross-site Scripting XSS. This allows for a Query System for Information...

9.3CVSS5.8AI score0.00177EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/28 12:00 a.m.•15 views

CVE-2026-2844: Missing Authentication for Critical Function

Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2...

9.3CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Rows per page
Query Builder