Início / CVEs

Vulnerabilidades exploradas (CISA KEV)

CVEs com exploração confirmada pela CISA (Known Exploited Vulnerabilities), com ação exigida e prazos.

2 resultado(s)

Exportar esta busca: RSS · CSV · STIX

CVE-2021-26829 Média · 5.4 KEV Alta · 53 CWE-79 11/06/2021

OpenPLC ScadaBR Cross-site Scripting Vulnerability

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.

CVE-2021-26828 Alta · 8.8 KEV Alta · 62 Exploit público CWE-434 11/06/2021

OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.