Priority LOW 23
SolarView Compact contains a cross-site scripting vulnerability in Image Management.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00237 · Published 2026-09-14 · Fixed in 9.00 CWE-79
Priority LOW 23
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00237 · Published 2026-09-14 · Fixed in 9.00 CWE-79
Priority MEDIUM 43
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01868 · Published 2026-09-14 · Fixed in 9.00 CWE-78
Priority MEDIUM 40
Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.00631 · Published 2026-09-14 · Fixed in 2.20 CWE-434
Priority MEDIUM 40
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series.
CVSS 4.0HIGH 8.6· Network · Low privileges · No interaction · EPSS 0.00486 · Published 2026-09-14 · Fixed in 1.12.00, 1.14.00 +1 CWE-23
Priority LOW 22
Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit.
CVSS 4.0MEDIUM 4.8· Adjacent network · No auth · User interaction · EPSS 0.00237 · Published 2026-09-14 · Fixed in 2.20 CWE-79
Priority MEDIUM 43
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01868 · Published 2026-09-14 · Fixed in 2.20 CWE-78
Priority LOW 22
Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US.
CVSS 4.0MEDIUM 4.8· Network · Low privileges · User interaction · EPSS 0.00235 · Published 2026-09-14 · Fixed in 1.01.00 CWE-79
Priority MEDIUM 40
An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00549 · Published 2026-09-14 · Fixed in 3.8.0 CWE-95
Priority LOW 22
Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series.
CVSS 4.0MEDIUM 4.8· Network · Low privileges · User interaction · EPSS 0.00235 · Published 2026-09-14 · Fixed in 1.12.00, 1.14.00 +1 CWE-79
Priority MEDIUM 47
Missing authentication for critical function vulnerability exists in CPSL-08P1EN.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00669 · Published 2026-09-14 · Fixed in 2.3.10 CWE-306
Priority LOW 23
Cross-site scripting vulnerability exists in CPSL-08P1EN.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00263 · Published 2026-09-14 · Fixed in 2.3.10 CWE-79
Priority LOW 35
Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00303 · Published 2026-09-14 · Fixed in 1.82 CWE-522
Priority LOW 25
Stack-based buffer overflow vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00492 · Published 2026-09-14 · Fixed in 1.82 CWE-121
Priority LOW 36
Missing authentication for critical function vulnerability exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00341 · Published 2026-09-14 · Fixed in 1.82 CWE-306
Priority LOW 18
Plaintext storage of a password issue exists in CONPROSYS nano Series .
CVSS 4.0MEDIUM 4.1· Physical · No auth · No interaction · EPSS 0.00175 · Published 2026-09-14 · Fixed in 1.82, 1.02 +1 CWE-256
Priority LOW 24
Out-of-bounds write vulnerability exists in CONPROSYS nano Series.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00455 · Published 2026-09-14 · Fixed in 1.82, 1.02 +1 CWE-787
Priority LOW 23
Cross-site scripting vulnerability exists in CONPROSYS nano Series.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00237 · Published 2026-09-14 · Fixed in 1.82, 1.02 +1 CWE-79
Priority MEDIUM 41
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00606 · Published 2026-09-14 · Fixed in 2.19 CWE-434
Priority MEDIUM 43
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM Series.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01868 · Published 2026-09-14 · Fixed in 2.19 CWE-78
Priority LOW 24
An exposure of information through directory listing issue exists in CONPROSYS PAC Series.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2026-09-14 · Fixed in 3.0.0 CWE-548
Priority MEDIUM 43
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01868 · Published 2026-09-14 · Fixed in 3.0.0 CWE-78
Priority LOW 23
Cross-site scripting vulnerability exists in CONPROSYS PAC Series.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00263 · Published 2026-09-14 · Fixed in 3.0.0 CWE-79
Priority LOW 24
An exposure of information through directory listing issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2026-09-14 · Fixed in 4.1.0 CWE-548
Priority MEDIUM 43
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01868 · Published 2026-09-14 · Fixed in 4.1.0 CWE-78
Load more