Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

2 result(s)

Export this search: RSS · CSV · STIX

CVE-2021-26829 Medium · 5.4 KEV High · 53 CWE-79 Jun 11, 2021

OpenPLC ScadaBR Cross-site Scripting Vulnerability

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.

CVE-2021-26828 High · 8.8 KEV High · 62 Public exploit CWE-434 Jun 11, 2021

OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.