Lucene search
+L

40 matches found

NVD
NVD
•added 2026/11/12 7:16 a.m.•9 views

CVE-2026-8333

A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page...

9.4CVSS0.00366EPSS
SaveExploits0References2
NVD
NVD
•added 2026/11/12 7:16 a.m.•9 views

CVE-2026-8332

A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials...

8.8CVSS0.00282EPSS
SaveExploits0References2
NVD
NVD
•added 2026/11/12 7:16 a.m.•8 views

CVE-2026-8331

An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...

8.8CVSS0.00563EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/11/12 6:21 a.m.•7 views

EUVD-2026-124293

An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...

8.8CVSS6.5AI score0.00563EPSS
SaveExploits0References2
CVE
CVE
•added 2026/11/12 6:21 a.m.•13 views

CVE-2026-8331

The Microchip TimePictra platform is susceptible to remote code execution due to an unrestricted upload of files with dangerous types . The vulnerability occurs because certain functionalities are not properly constrained by access control lists , allowing an attacker to upload malicious files. W...

8.8CVSS6.5AI score0.00563EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/12 6:21 a.m.•24 views

CVE-2026-8331 TimePictra ermote code execution via file upload

An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...

8.8CVSS0.00563EPSS
SaveExploits0References2
CVE
CVE
•added 2026/11/12 6:19 a.m.•15 views

CVE-2026-8332

The Microchip TimePictra platform contains a hard-coded root password within its installation files. An attacker who gains access to these files could obtain privileged credentials , potentially compromising the system. This vulnerability is associated with CWE-798 (Use of Hard-coded Credentials)...

8.8CVSS6AI score0.00282EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/12 6:19 a.m.•22 views

CVE-2026-8332 TimePictra root password hardcoded in installation files

A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials...

8.8CVSS0.00282EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/11/12 6:19 a.m.•8 views

EUVD-2026-124292

A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials...

8.8CVSS6AI score0.00282EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/11/12 6:18 a.m.•7 views

EUVD-2026-124291

A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page...

9.4CVSS5.7AI score0.00366EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/12 6:18 a.m.•23 views

CVE-2026-8333 TimePictra Stored Cross-site Scripting

A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page...

9.4CVSS0.00366EPSS
SaveExploits0References2
CVE
CVE
•added 2026/11/12 6:18 a.m.•14 views

CVE-2026-8333

A stored cross-site scripting (XSS) vulnerability exists in the Microchip TimePictra platform . This flaw allows an authenticated, low-privileged attacker to store malicious script content, which then executes in the context of other users viewing the affected page. The vulnerability is associate...

9.4CVSS5.7AI score0.00366EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/12 12:00 a.m.•5 views

CVE-2026-8331: Microchip TimePictra: An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows…

An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...

8.8CVSS6.6AI score0.00563EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/12 12:00 a.m.•5 views

CVE-2026-8332: Microchip TimePictra: A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to…

A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials...

8.8CVSS6AI score0.00282EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/12 12:00 a.m.•4 views

PT-2026-145722

A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials...

8.8CVSS6AI score0.00282EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/11/12 12:00 a.m.•5 views

PT-2026-145723

A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page...

9.4CVSS5.7AI score0.00366EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/12 12:00 a.m.•2 views

CVE-2026-8333: Microchip TimePictra: A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated,…

A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page...

9.4CVSS5.7AI score0.00366EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/12 12:00 a.m.•4 views

PT-2026-145721

An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...

8.8CVSS6.6AI score0.00563EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/03/02 1:51 a.m.•42 views

CVE-2026-3010

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2...

9.3CVSS5.8AI score0.00177EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/02 1:50 a.m.•26 views

CVE-2026-2844

Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2...

9.3CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Rows per page
Query Builder