CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
OpenPLC ScadaBR Stored Cross-Site Scripting (XSS) Vulnerability (CVE-2021-26829) Security Advisory
[Affected Scope] OpenPLC ScadaBR through version 0.9.1 on Linux and through version 1.12.4 on Windows
[Impact] Attackers can inject malicious scripts permanently via system_settings.shtm, leading to administrator session hijacking and unauthorized SCADA control
[Mitigation] Apply the latest security patches, restrict external access, and deploy Web Application Firewall (WAF) rules to sanitize input parameters
OpenPLC ScadaBR Arbitrary File Upload and Remote Code Execution (RCE) Vulnerability Advisory (CVE-2021-26828)
[Affected Scope] OpenPLC ScadaBR through version 0.9.1 on Linux and through version 1.12.4 on Windows
[Impact] Remote authenticated attackers can upload and execute malicious JSP files, leading to complete system compromise and arbitrary code execution
[Mitigation] Apply the latest security patches, restrict external access to the ScadaBR interface, and block unauthorized JSP uploads via WAF rules
Trihedral VTScada WAP Interface Out-of-Bounds Read Vulnerability (CVE-2016-4523) Technical Advisory
[Affected Scope] Trihedral VTScada (formerly VTS) versions 8.x through 11.x before 11.2.02
[Impact] Unauthenticated remote attackers can cause a denial of service (application crash) by sending crafted requests to the WAP interface
[Mitigation] Immediately upgrade VTScada to version 11.2.02 or later, and restrict external access to the WAP interface
InduSoft Web Studio NTWebServer Directory Traversal and Remote Code Execution Vulnerability (CVE-2014-0780) Security Advisory
[Affected Scope] NTWebServer component in InduSoft Web Studio versions prior to 7.1 SP2 Patch 4
[Impact] Unauthenticated remote attackers can exploit directory traversal to read administrative passwords in APP files, leading to arbitrary remote code execution (RCE)
[Mitigation] Upgrade InduSoft Web Studio to version 7.1 SP2 Patch 4 or later, and restrict external access to the NTWebServer port