Json Scada
Approved changes feed: RSS · Atom
cpe:2.3:a:riclolsen:json-scada:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Riclolsen (c6e6315c-1c23-582d-80c6-cf45fa58204a) |
|---|---|
| Product | Json Scada (d67e07cc-f7b1-5505-8d29-2b4bfac7c7f8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-115328 |
vulnerable | 2026-11-03 10:15:37.480410 |
JSON-SCADA before 0.65-alpha SQL Injection via OPC HistoryRead API
HIGH (8.8)
JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi() in src/server_realtime_auth/index.js that allows authenticated users to inject SQL via HistoryReadRequest parameters. Attackers can inject stacked statements through NodeId.Id, StartTime, or EndTime values to read, modify, or delete historian data across all locations regardless of role.
Published: 2026-10-22T10:57:45.975Z
Updated: 2026-10-29T13:39:16.913Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.