Lucene search
+L

3881 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:34 p.m.•22 views

CVE-2026-10058

ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load...

4.8CVSS5.5AI score0.00176EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:24 p.m.•20 views

CVE-2026-8605

In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin...

9.8CVSS5.5AI score0.00495EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:11 p.m.•18 views

CVE-2026-8603

In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system...

9.8CVSS5.7AI score0.02055EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/29 9:16 a.m.•29 views

CVE-2026-10057

ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load...

4.8CVSS0.00176EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/29 8:37 a.m.•64 views

CVE-2026-10058 ITP Technology|ITS Intelligent SCADA System - Stored Cross-Site Scripting

ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load...

4.8CVSS0.00176EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/29 8:37 a.m.•30 views

EUVD-2026-33268

ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load...

4.8CVSS5.8AI score0.00176EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/29 8:37 a.m.•45 views

CVE-2026-10058

The CVE-2026-10058 entry concerns ITS Intelligent SCADA System by ITP Technology and describes a Stored Cross-Site Scripting vulnerability that allows privileged remote attackers to inject JavaScript executed in users’ browsers on page load. Documents confirm the affected product, vulnerability t...

4.8CVSS5.8AI score0.00176EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/29 8:37 a.m.•33 views

CVE-2026-10058 ITP Technology|ITS Intelligent SCADA System - Stored Cross-Site Scripting

ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load...

4.8CVSS5.8AI score0.00176EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/29 8:34 a.m.•63 views

CVE-2026-10057

CVE-2026-10057 affects the ITS Intelligent SCADA System from ITP Technology. The vulnerability is a Stored Cross-Site Scripting (XSS) issue that lets privileged remote attackers inject persistent JavaScript that runs in users’ browsers when a page loads. The available documents confirm the affect...

4.8CVSS5.8AI score0.00176EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/29 12:00 a.m.•2 views

CVE-2026-10058: Improper Neutralization of Input During Web Page Generation

ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load...

4.8CVSS5.8AI score0.00176EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/29 12:00 a.m.•1 views

CVE-2026-10057: Improper Neutralization of Input During Web Page Generation

ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load...

4.8CVSS5.8AI score0.00176EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/29 12:00 a.m.•37 views

PT-2026-44764

Name of the Vulnerable Software and Affected Versions ITS Intelligent SCADA System affected versions not specified Description ITS Intelligent SCADA System contains a Stored Cross-Site Scripting issue. This allows privileged remote attackers to inject persistent JavaScript codes that execute in t...

4.8CVSS6AI score0.00176EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/05/28 8:32 p.m.•62 views

CVE-2026-9646 ScadaBR Unauthenticated Reflected Cross-Site Scripting

A reflected cross-site scripting issue exists in URL handling...

6.1CVSS0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/28 8:30 p.m.•18 views

CVE-2026-9645 ScadaBR Authenticated Remote Code Execution

Exposed methods allow authenticated users to create and execute arbitrary JavaScript code on the server. The scripts execute with full access, enabling complete system compromise as commands are executed as root...

9.9CVSS6.3AI score0.00524EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/22 5:16 p.m.•41 views

CVE-2026-36226

Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensitive information via the decryption field in the Create New Project User component...

6.1CVSS0.00302EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2026/05/22 2:18 p.m.•155 views

Exploit for CVE-2026-36226

CVE-2026-36226: Advantech WebAccess/SCADA Create New Project U...

5.9AI score0.00302EPSS
SaveExploits1
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•35 views

Advantech WebAccess/SCADA 安全漏洞

Advantech WebAccess/SCADA is a SCADA software based on the browser architecture developed by Advantech China Research & Development. This software supports dynamic graphical displays and real-time data control, and provides functionality for remote control and management of automation devices. Th...

6.1CVSS5.7AI score0.00302EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/05/22 12:00 a.m.•52 views

CVE-2026-36226

Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensitive information via the decryption field in the Create New Project User component...

0.00302EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•3 views

CVE-2026-36226: Undefined Security Weakness

Cross Site Scripting vulnerability in Advantech WebAccess/SCADA 8.0-2015.08.16 allows a remote attacker to obtain sensitive information via the decryption field in the Create New Project User component...

6.1CVSS5.9AI score0.00302EPSS
SaveExploits1References2
NVD
NVD
•added 2026/05/19 6:16 p.m.•36 views

CVE-2026-8603

In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system...

9.8CVSS0.02055EPSS
SaveExploits0References1
Rows per page
Query Builder