Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 62

Export CSV
CVE-2024-7801

SQL injection in get_chart_data in TimeProvider 4100

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip TimeProvider 4100 (Data plot modules) allows SQL Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microchip
Products
Timeprovider 4100 Timeprovider 4100 Firmware
CVE-2024-43686

Reflected XSS in TimeProvider 4100 chart component

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimeProvider 4100 (data plot modules) allows Reflected XSS.This issue affects TimeProvider 4100: from 1.0 before 2.4.7.

CVSS 4.0 · 5.4 Medium EPSS 13.0% KEV · Not listed
Vendors
Microchip
Products
Timeprovider 4100 Timeprovider 4100 Firmware