74 matches found
CVE-2020-12021
In OSIsoft PI Web API 2019 Patch 1 1.12.0.6346 and all previous versions, the affected product is vulnerable to a cross-site scripting attack, which may allow an attacker to remotely execute arbitrary code...
EUVD-2017-16897
Malware in sbrugna...
EUVD-2018-19229
Malware in sbrugna...
EUVD-2016-9201
Malware in sbrugna...
EUVD-2019-4970
Malware in sbrugna...
EUVD-2019-4971
Malware in sbrugna...
EUVD-2018-19237
Malware in sbrugna...
EUVD-2020-4337
Malware in sbrugna...
EUVD-2025-18212
Malicious code in bioql PyPI...
EUVD-2021-30478
Malicious code in bioql PyPI...
EUVD-2024-32054
Malicious code in bioql PyPI...
CVE-2025-2745
A cross-site scripting vulnerability exists in AVEVA PI Web API version 2023 SP1 and prior that, if exploited, could allow an authenticated attacker with privileges to create/update annotations or upload media files to persist arbitrary JavaScript code that will be executed by users who were...
CVE-2025-2745
A cross-site scripting vulnerability exists in AVEVA PI Web API version 2023 SP1 and prior that, if exploited, could allow an authenticated attacker with privileges to create/update annotations or upload media files to persist arbitrary JavaScript code that will be executed by users who were...
CVE-2025-2745 AVEVA PI Web API Cross-site Scripting
A cross-site scripting vulnerability exists in AVEVA PI Web API version 2023 SP1 and prior that, if exploited, could allow an authenticated attacker with privileges to create/update annotations or upload media files to persist arbitrary JavaScript code that will be executed by users who were...
CVE-2025-2745
CVE-2025-2745 is a cross-site scripting vulnerability in AVEVA PI Web API (versions 2023 SP1 and prior). The root cause is improper handling that allows an authenticated attacker, with privileges to create/update annotations or upload media files, to persist arbitrary JavaScript code. The code co...
CVE-2025-2745 AVEVA PI Web API Cross-site Scripting
A cross-site scripting vulnerability exists in AVEVA PI Web API version 2023 SP1 and prior that, if exploited, could allow an authenticated attacker with privileges to create/update annotations or upload media files to persist arbitrary JavaScript code that will be executed by users who were...
PT-2025-25349 · Aveva · Aveva Pi Web Api
Name of the Vulnerable Software and Affected Versions: AVEVA PI Web API versions 2023 SP1 and prior Description: A cross-site scripting issue exists that could allow an authenticated attacker with privileges to create or update annotations, or upload media files, to persist arbitrary JavaScript...
CVE-2025-2745: Improper Neutralization of Input During Web Page Generation
A cross-site scripting vulnerability exists in AVEVA PI Web API version 2023 SP1 and prior that, if exploited, could allow an authenticated attacker with privileges to create/update annotations or upload media files to persist arbitrary JavaScript code that will be executed by users who were...