Most recent entries from all

cnvd-2017-10708

EUVD-2026-73730

fkie_cve-2017-6053

A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A cross-site scripting vulnerability may allow JavaScript code supplied by the attacker to execute within the user's browser.

GHSA-h55q-pqvr-x64q

gsd-2017-6053

ICSA-17-164-01 — Trihedral Engineering Limited VTScada

The client does not properly validate the input or limit the amount of resources that are utilized by an attacker, which can be used to consume more resources than are available.CVE-2017-6043 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). A cross-site scripting vulnerability may allow JavaScript code supplied by the attacker to execute within the user's browser.CVE-2017-6053 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information.CVE-2017-6045 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).