Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

fuxa-server

npm

Web-based Process Visualization (SCADA/HMI/Dashboard) software

View on github.com · View on npmjs.org

Security Advisories for fuxa-server in npm

Moderate
2 months ago

FUXA's scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions GSA_kwCzR0hTQS04Z2hyLXc2NWYtajNxcs4ABYS6

npm fuxa-server
Moderate
2 months ago

FUXA has SQL Injection in its TDengine DAQ connector via backslash bypass of escapeTdString GSA_kwCzR0hTQS1oOWZqLWMycXItNzZnMs4ABYS5

npm fuxa-server
High
2 months ago

FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading GSA_kwCzR0hTQS13ODZmLXJmOXctaDN4Ns4ABYS4

npm fuxa-server
Moderate
3 months ago

FUXA provides guest and invalid-token access to protected read APIs in secure mode GSA_kwCzR0hTQS1yOWc1LTdxOGotOTU4Y84ABXpx

npm fuxa-server
High
3 months ago

FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations GSA_kwCzR0hTQS1xM3c2LXEzaGMtYzV4Ns4ABXlZ

npm fuxa-server
High
3 months ago

FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass GSA_kwCzR0hTQS1yZzNtLWNmcTctZzZoNs4ABXa6

npm fuxa-server
High
3 months ago

FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue GSA_kwCzR0hTQS1md2NtLXJxdnctajNwN84ABXa5

npm fuxa-server
High
6 months ago

FUXA Affected by a Path Traversal Sanitization Bypass GSA_kwCzR0hTQS02OG01LTV3MmgtaDgzN84ABSH4

npm fuxa-server
Critical
6 months ago

FUXA Unauthenticated Remote Arbitrary Scheduler Write GSA_kwCzR0hTQS1jODY5LWp4NGMtcTVmY84ABSH2

npm fuxa-server
Critical
6 months ago

FUXA Unauthenticated Remote Code Execution in Node-RED Integration GSA_kwCzR0hTQS12NHA1LXc2cjMtMng0Zs4ABSH1

npm fuxa-server
Critical
7 months ago

FUXA Unauthenticated Remote Arbitrary Device Tag Write GSA_kwCzR0hTQS1nZ3h3LWczY3AtbWdmOM4ABR-c

npm fuxa-server
Critical
7 months ago

FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API GSA_kwCzR0hTQS04OHFoLWNwaHYtOTk2Y84ABR-b

npm fuxa-server
Critical
7 months ago

FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration GSA_kwCzR0hTQS0zMmNjLXg5NXAtZnhjZ84ABR-a

npm fuxa-server
Critical
7 months ago

FUXA Unauthenticated Exposure of Plaintext Database Credentials GSA_kwCzR0hTQS1jNWdxLTRoNTYtNG1teM4ABR-Z

npm fuxa-server
Critical
7 months ago

FUXA Unauthenticated Remote Code Execution via Admin JWT Minting GSA_kwCzR0hTQS12d2NnLWM4MjgtOTgyMs4ABR-A

npm fuxa-server
High
7 months ago

FUXA contains an Unrestricted File Upload vulnerability GSA_kwCzR0hTQS03ZzU2LWZ3eGotY20yM84ABR4L

npm fuxa-server
High
7 months ago

FUXA allows Remote Code Execution (RCE) via the project import functionality. GSA_kwCzR0hTQS01cjYzLXE4aGctcDhxeM4ABR4r

npm fuxa-server
High
7 months ago

FUXA contains an insecure default configuration vulnerability GSA_kwCzR0hTQS1yNW0yLWZxY2YtcXJmN84ABR4c

npm fuxa-server
High
almost 3 years ago

FUXA SQL Injection vulnerability GSA_kwCzR0hTQS12OXE1LTljcnAtOTJmOc4AA2AH

npm fuxa-server
Critical
almost 3 years ago

FUXA SQL Injection vulnerability GSA_kwCzR0hTQS1wNDZnLThjM3EtODlwMs4AA2AM

npm fuxa-server
High
almost 3 years ago

FUXA local file inclusion vulnerability GSA_kwCzR0hTQS13d2ZqLWg4NDMtM2hycc4AA2AL

npm fuxa-server

Filter by Severity

High 10 Critical 8 Moderate 3