Search Results (5 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-8333 1 Microchip 1 Timepictra 2026-11-13 N/A
A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page
CVE-2026-8332 1 Microchip 1 Timepictra 2026-11-13 N/A
A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials
CVE-2026-8331 1 Microchip 1 Timepictra 2026-11-13 N/A
An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution.
CVE-2026-2844 1 Microchip 1 Timepictra 2026-04-16 7.5 High
Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2.
CVE-2026-3010 1 Microchip 1 Timepictra 2026-04-16 6.1 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2.