736 matches found
Symmetricom SyncServer Unauthenticated - Remote Command Execution
Microchip Technology Microsemi SyncServer S650 was discovered to contain a command injection vulnerability. id: CVE-2022-40022 info: name: Symmetricom SyncServer Unauthenticated - Remote Command Execution author: DhiyaneshDK,mielverkerken severity: critical description: | Microchip Technology...
CVE-2026-8333
A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page...
CVE-2026-8332
A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials...
CVE-2026-8331
An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...
EUVD-2026-124293
An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...
CVE-2026-8331
The Microchip TimePictra platform is susceptible to remote code execution due to an unrestricted upload of files with dangerous types . The vulnerability occurs because certain functionalities are not properly constrained by access control lists , allowing an attacker to upload malicious files. W...
CVE-2026-8331 TimePictra ermote code execution via file upload
An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...
EUVD-2026-124292
A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials...
CVE-2026-8333 TimePictra Stored Cross-site Scripting
A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page...
EUVD-2026-124291
A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page...
CVE-2026-8333
A stored cross-site scripting (XSS) vulnerability exists in the Microchip TimePictra platform . This flaw allows an authenticated, low-privileged attacker to store malicious script content, which then executes in the context of other users viewing the affected page. The vulnerability is associate...
CVE-2026-8331: Microchip TimePictra: An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows…
An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...
PT-2026-145723
Name of the Vulnerable Software and Affected Versions TimePictra versions prior to 12.0 Description A stored cross-site scripting issue exists where an authenticated, low-privileged attacker can store malicious script content. This script executes when another user views the affected page...
CVE-2026-8332: Microchip TimePictra: A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to…
A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials...
PT-2026-145722
A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials...
PT-2026-145721
An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution...
CVE-2026-8333: Microchip TimePictra: A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated,…
A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...
CVE-2026-98908
A flaw was found in the Linux kernel's Microchip Sparx5 network driver. When configuring traffic control rules with Per-Stream Filtering and Policing PSFP, the driver fails to properly unwind allocated resources and correct reference counts if a setup step fails. A privileged local user could...
K000163893: Linux kernel vulnerability CVE-2026-46148
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: control built-in cs manually The coreQSPI IP supports only a single chip select, which is automagically operated by the hardware - set low when the transmit buffer first get...