Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.3Blinko is an AI-powered card note-taking project.EPSS 0.3%Mar 23, 2026
- Critical10.0The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration.Mar 12, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Schmit Theater for WordPress theatre allows Stored XSS.Thi…EPSS 0.2%Mar 5, 2026
- Medium6.5Incorrect access control in the VNC component of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to access the HMI system.EPSS 0.3%Mar 3, 2026
- High8.8Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter.EPSS 1.3%Mar 3, 2026
- Medium5.5A vulnerability was found in RashminDungrani online-banking up to 2337ad552ea9d385b4e07b90e6f32d011b7c68a2.EPSS 0.3%Dec 7, 2025
- Medium6.5Execution with Unnecessary Privileges vulnerability in multiple services of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.EPSS 23.0%May 15, 2025
- Unknownsmart-hmi webiq Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVOct 7, 2024
- Unknownwebhmi webhmi_firmware Unrestricted Upload of File with Dangerous TypeKEVMay 9, 2024
- Critical9.8Unitronics Vision PLC and HMI Insecure Default Password VulnerabilityKEVEPSS 2.1%Nov 28, 2023
- Medium6.5Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow.EPSS 75.4%May 30, 2023
- Medium6.3Cisco IOS Software Resource Management Errors VulnerabilityKEVEPSS 4.1%Mar 28, 2018
37 records · page 2 of 2
PreviousNext