Lucene search
+L

6 matches found

CNNVD
CNNVD
•added 2026/05/26 12:00 a.m.•23 views

Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 路径遍历漏洞

Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform is a power operation and maintenance cloud platform developed by Acrel Corporation. Version 1.3.0 of Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform contains a path traversal...

7.5CVSS7.1AI score0.00718EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/26 12:00 a.m.•3 views

CVE-2026-9550: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was determined in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. Affected by this issue is some unknown functionality of the file /SubstationWEBV2/app/..;/main/upfile. Executing a manipulation of the argument path can lead to path traversal...

7.5CVSS6.9AI score0.00718EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/03 11:45 a.m.•56 views

CVE-2026-7694 Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System elecMaxMinAvgValue sql injection

A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 1.3.0. The impacted element is an unknown function of the file /SubstationWEBV2/main/elecMaxMinAvgValue. Executing a manipulation of the argument fCircuitids can lead to sql injection. The...

7.5CVSS0.00411EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/03 12:00 a.m.•6 views

CVE-2026-7696: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This impacts an unknown function of the file /SubstationWEBV2/main/uploadH5Files. The manipulation of the argument File results in unrestricted upload. The attack may be launched...

6.5CVSS6.3AI score0.00378EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/03 12:00 a.m.•3 views

CVE-2026-7694: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 1.3.0. The impacted element is an unknown function of the file /SubstationWEBV2/main/elecMaxMinAvgValue. Executing a manipulation of the argument fCircuitids can lead to sql injection. The...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/03 12:00 a.m.•30 views

Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 注入漏洞

Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System is a microgrid energy efficiency management system developed by Acrel Corporation. Version 1.3.0 of the Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System contains a SQL injection...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References2
Rows per page
Query Builder