CVE-2016-5819

Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary script code in the user’s browser within the trust relationship between their browser and the server.

• CWE-79
• CWE-79

• https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01Third Party Advisory, US Government Resource

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5813An issue was discovered in Visonic PowerLink2, all versions …
• CVE-2016-5814Buffer overflow in Rockwell Automation RSLogix Micro Starter…
• CVE-2016-5815An issue was discovered on Schneider Electric IONXXXX series…
• CVE-2016-5816A Use of Hard-Coded Cryptographic Key issue was discovered i…
• CVE-2016-5817SQL injection vulnerability in news pages in Cargotec Navis …
• CVE-2016-5818An issue was discovered in Schneider Electric PowerLogic PM8…
• CVE-2016-5820Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-5821Huawei HiSuite before 4.0.4.204_ove (Out of China) and befor…
• CVE-2016-5822Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote…
• CVE-2016-5823The icalproperty_new_clone function in libical 0.47 and 1.0 …
• CVE-2016-582384Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-5824libical 1.0 allows remote attackers to cause a denial of ser…