arcinfo

Latest CVEs · RSS

• CVE-2026-14868 2026-07-07 · CVSS 8.4
  The encryption algorithm used to protect the configuration of user accounts, stored in the built-in user directory of PcVue projects, all versions prior to 17.0
• CVE-2026-14867 2026-07-07 · CVSS 6.8
  Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.0. A local attacker could retrieve users
• CVE-2026-1698 2026-02-26 · CVSS 5.3
  A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote at
• CVE-2026-1697 2026-02-26 · CVSS 5.3
  The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included.
• CVE-2026-1696 2026-02-26 · CVSS 2.3
  Some HTTP security headers are not properly set by the web server when sending responses to the client application.
• CVE-2026-1695 2026-02-26 · CVSS 5.3
  An XSS vulnerability affects the OAuth web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 in
• CVE-2026-1694 2026-02-26 · CVSS 2.3
  HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebSc
• CVE-2026-1693 2026-02-26 · CVSS 5.3
  The OAuth grant type Resource Owner Password Credentials (ROPC) flow is still used by the werbservices used by the WebVue, WebScheduler, TouchVue and Snapvue fe
• CVE-2026-1692 2026-02-26 · CVSS 5.3
  A missing origin validation in WebSockets vulnerability affects the GraphicalData web services used by the WebVue, WebScheduler, TouchVue and SnapVue features o
• CVE-2025-9999 2025-09-05 · CVSS 7.6
  Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attac
• CVE-2025-9998 2025-09-05 · CVSS 6.0
  The sequence of packets received by a Networking server are not correctly checked. An attacker could exploit this vulnerability to send specially crafted messa
• CVE-2025-4384 2025-05-06 · CVSS 6.0
  The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices t
• CVE-2024-12057 2024-12-09 · CVSS 1.8
  User credentials (login & password) are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with th
• CVE-2024-12056 2024-12-04 · CVSS 2.3
  The Client secret is not checked when using the OAuth Password grant type. By exploiting this vulnerability, an attacker could connect to a web server using a