1126730 matches found
EUVD-2026-77240
Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82788
CPSL-08P1EN , a Contec product, is affected by a cross-site scripting (XSS) vulnerability. If exploited, an arbitrary script may be executed on a logged-in user's web browser. The vulnerability requires user interaction and is network-reachable with low complexity. CNA-assigned scores are CVSS 3....
CVE-2026-82781
A cross-site scripting (XSS) vulnerability affects the CONPROSYS nano Series by CONTEC . If exploited, an arbitrary script may be executed in the web browser of a logged-in user . The CVSS 3.1 score is 5.4 (MEDIUM) , with low privileges required , user interaction required , and changed scope , i...
EUVD-2026-77234
Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82781
Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
EUVD-2026-77229
Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82776
A cross-site scripting (XSS) vulnerability exists in the CONPROSYS PAC Series . When exploited, an arbitrary script may be executed in the context of a logged-in user's web browser, with changed scope (CVSS 3.1: 6.1 MEDIUM ), indicating the impact extends beyond the vulnerable system to the subse...
CVE-2026-82776
Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
EUVD-2026-77226
Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82773
Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82773
A cross-site scripting (XSS) vulnerability affects CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series devices. When exploited, an arbitrary script may be executed in a logged-in user's web browser. The CNA (jpcert.or.jp) rates this MEDIUM severity (CVSS 3.1: 6.1, CVSS 4.0: 5.1), not...
CVE-2026-82771
Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
EUVD-2026-77224
Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82771
A cross-site scripting (XSS) vulnerability affects the Contec EC1000 series , allowing an arbitrary script to be executed in a logged-in user's web browser. The CVSS 3.1 score is 5.4 (Medium) with changed scope , indicating cross-origin impact on subsequent system confidentiality and integrity. E...
CVE-2025-55888
CVE-2025-55888 설명 ARD의 Ajax 트랜잭션 관리자 엔드포인트에서 XSSCross-Site Scripting 취약점이 발견되었습니다. 공격자는 Ajax 응답을 가로채서 accountName 필드에 악성 JavaScript를 주입할 수 있습니다. 이 입력은 렌더링될 때 적절히 이스케이프 처리되거나 인코딩되지 않아 사용자 브라우저 컨텍스트에서 스크립트 실행이 가능합니다. 이 결함으로 인해 세션 하이재킹, 쿠키 도용 및 기타 악의적인 행위가 발생할 수 있습니다. PoC Proof of Concept 페이로드 삽입 취약...
EUVD-2026-77221
Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82769
A cross-site scripting (XSS) vulnerability affects the Contec RP-WAH-SR Series . If exploited, an arbitrary script may be executed in the web browser of a logged-in user . The CNA-assigned CVSS 3.1 score is 5.4 (MEDIUM) with a changed scope and low confidentiality/integrity impact, while the CVSS...
CVE-2026-82769
Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...