Threat database

15 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.6	EPSS 0.2%	CVE-2026-89172AN1044 · Improper protection of physical side channels Medium5.6EPSS 0.2%2026-09-12CVE Database V5CVE-2026-89172 Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6. EPSS 0.2%Vulnerability Microchip #cwe-1300	CVE Database V5	2026-09-12
High	7.3	EPSS 0.1%	CVE-2026-18349SAMA5D4 · Improper protection against voltage and clock glitches High7.3EPSS 0.1%2026-08-24CVE Database V5CVE-2026-18349 Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4. EPSS 0.1%Vulnerability Microchip #cwe-1247	CVE Database V5	2026-08-24
Medium	4.6	EPSS 0.4%	CVE-2026-12620GridTime 3000 · CWE-200 Medium4.6EPSS 0.4%2026-06-19CVE Database V5CVE-2026-12620 The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. EPSS 0.4%Vulnerability Microchip #cwe-200	CVE Database V5	2026-06-19
Medium	5.3	EPSS 0.2%	CVE-2026-12621GridTime 3000 · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium5.3EPSS 0.2%2026-06-19CVE Database V5CVE-2026-12621 Improper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS. This issue affects GridTime 3000: from 1.0r0.03 before 1.2r0.0. EPSS 0.2%Vulnerability Microchip #cwe-79	CVE Database V5	2026-06-19
Medium	5.3	EPSS 0.2%	CVE-2026-12622GridTime 3000 · open redirect Medium5.3EPSS 0.2%2026-06-19CVE Database V5CVE-2026-12622 The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. EPSS 0.2%Vulnerability Microchip #cwe-601	CVE Database V5	2026-06-19
Medium	5.1	EPSS 0.2%	CVE-2026-12619GridTime 3000 · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium5.1EPSS 0.2%2026-06-19CVE Database V5CVE-2026-12619 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site Scripting (XSS). This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0. EPSS 0.2%Vulnerability Microchip #cwe-79	CVE Database V5	2026-06-19
High	8.7	EPSS 0.2%	CVE-2026-2336IStaX · Insufficient entropy High8.7EPSS 0.2%2026-04-16CVE Database V5CVE-2026-2336 A privilege escalation vulnerability in Microchip IStaX allows an authenticated low-privileged user to recover a shared per-device cookie secret from their own webstax_auth session cookie and forge a new cookie with administrative privileges.This issue affects IStaX before 2026.03. EPSS 0.2%Vulnerability Microchip #cwe-331	CVE Database V5	2026-04-16
Medium	5.5	EPSS 0.3%	CVE-2025-9497Time Provider 4100 · Use of Hard-coded Credentials Medium5.5EPSS 0.3%2026-03-28CVE Database V5CVE-2025-9497 Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0. EPSS 0.3%Vulnerability Microchip #cwe-798	CVE Database V5	2026-03-28
Critical	9.3	EPSS 0.3%	CVE-2026-3010TimePictra · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Critical9.3EPSS 0.3%2026-02-28CVE Database V5CVE-2026-3010 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2. EPSS 0.3%Vulnerability Microchip #cwe-79	CVE Database V5	2026-02-28
Critical	9.3	EPSS 0.5%	CVE-2026-2844TimePictra · Missing Authentication for Critical Function Critical9.3EPSS 0.5%2026-02-28CVE Database V5CVE-2026-2844 Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2. EPSS 0.5%Vulnerability Microchip #cwe-306	CVE Database V5	2026-02-28
Medium	5.7	EPSS <0.1%	CVE-2025-47904Time Provider 4100 · Download of Code Without Integrity Check Medium5.7EPSS <0.1%2026-02-24CVE Database V5CVE-2025-47904 Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5. EPSS <0.1%Vulnerability Microchip #cwe-494	CVE Database V5	2026-02-24
High	7.1	EPSS 0.4%	CVE-2025-47902Time Provider 4100 · SQL Injection High7.1EPSS 0.4%2025-10-20CVE Database V5CVE-2025-47902 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5. EPSS 0.4%Vulnerability Microchip #cwe-89	CVE Database V5	2025-10-20
High	8.9	EPSS 1.4%	CVE-2025-47901Time Provider 4100 · OS Command Injection High8.9EPSS 1.4%2025-10-20CVE Database V5CVE-2025-47901 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5. EPSS 1.4%Vulnerability Microchip #cwe-78	CVE Database V5	2025-10-20
High	8.9	EPSS 1.4%	CVE-2025-47900Time Provider 4100 · OS Command Injection High8.9EPSS 1.4%2025-10-20CVE Database V5CVE-2025-47900 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5. EPSS 1.4%Vulnerability Microchip #cwe-78	CVE Database V5	2025-10-20
Medium	6.3	EPSS 0.2%	CVE-2024-4760SAME70 · Improper Protection Against Voltage and Clock Glitches Medium6.3EPSS 0.2%2024-05-16CVE Database V5CVE-2024-4760 A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set. EPSS 0.2%Vulnerability Microchip #cwe-1247	CVE Database V5	2024-05-16

Showing 1–15 of 15 results