Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2023-45796

XSS vulnerability in Pilz PASvisu and PMI v8xx

A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 and PMI v8xx up to and including 2.0.33992 allows a low-privileged remote unauthenticated attacker to manipulate process data with potential impact on integrity and/or availability.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Pilz
Products
Pasvisu Pmi V8xx
CVE-2023-45795

Pilz: XSS vulnerability in Pilz PASvisu and PMI v8xx

A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticated attacker to inject malicious javascript and gain full control over the device.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Pilz
Products
Pasvisu Pmi V8xx
CVE-2022-40977

PILZ: PASvisu and PMI affected by ZipSlip

A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Pilz
Products
Pasvisu Pmi V507 Pmi V507 Firmware and 12 more