Lucene search
K

19165 matches found

CNNVD
CNNVD
added 2026/01/05 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an unset error code in the mchpeicdomainalloc function in the mchp-eic interrupt controller driver, whi...

6.3AI score0.00161EPSS
Exploits0References6
OSV
OSV
added 2026/01/04 2:15 a.m.3 views

CVE-2026-0574

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

8.8CVSS5.4AI score0.00299EPSS
Exploits1References5
EUVD
EUVD
added 2026/01/04 2:2 a.m.5 views

EUVD-2026-0783

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

6.5CVSS6.2AI score0.00299EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2026/01/04 1:4 a.m.41 views

CVE-2025-64124

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: before 2.5.1...

8.7CVSS7.1AI score0.009EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/04 12:0 a.m.4 views

warehouse 授权问题漏洞

warehouse is a spring boot based logistics management system for small and medium-sized warehouses by yeqifu individual developers. There is an authorization issue vulnerability in warehouse, which originates from improper authorization of the function saveUserRole in the file...

8.8CVSS6.4AI score0.00299EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2026/01/03 10:4 p.m.11 views

CVE-2025-64120

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

9.4CVSS7AI score0.009EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/03 10:4 p.m.11 views

CVE-2025-64122

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller MSC: through 2.5.1...

7.2CVSS7AI score0.00081EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/03 10:4 p.m.22 views

CVE-2025-64123

Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Network Boundary Bridging.This issue affects Multi-Stack Controller MSC: through and including release 2.5.1...

7.9CVSS7AI score0.00274EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/03 10:4 p.m.9 views

CVE-2025-64121

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Authentication Bypass.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

10CVSS7AI score0.00353EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/03 7:7 a.m.8 views

CVE-2025-15432

A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This vulnerability affects the function downloadShowFile of the file /file/downloadShowFile.action of the component com.yeqifu.sys.controller.FileController. The manipulation of the argument path...

7.5CVSS6.5AI score0.00598EPSS
Exploits1References1
NVD
NVD
added 2026/01/03 1:15 a.m.3 views

CVE-2025-64124

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: before 2.5.1...

8.8CVSS0.009EPSS
Exploits0References1
OSV
OSV
added 2026/01/03 1:15 a.m.3 views

CVE-2025-64124

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: before 2.5.1...

8.8CVSS5.8AI score0.009EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/03 12:31 a.m.6 views

EUVD-2025-206224

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller MSC: through 2.5.1...

9.3CVSS6.5AI score0.0036EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/03 12:31 a.m.3 views

EUVD-2025-206226

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

9.4CVSS6.5AI score0.009EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/03 12:31 a.m.4 views

EUVD-2025-206225

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Authentication Bypass.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

10CVSS6.5AI score0.0036EPSS
Exploits0References2
CVE
CVE
added 2026/01/03 12:28 a.m.17 views

CVE-2025-64124

CVE-2025-64124 is an OS command injection in Nuvation Energy Multi-Stack Controller (MSC). Multiple connected sources (NVD, Red Hat advisories, CIRCL) confirm the issue affects MSC versions prior to 2.5.1 due to improper neutralization of special elements used in OS commands. The vulnerability ex...

8.8CVSS6.3AI score0.009EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/03 12:28 a.m.18 views

CVE-2025-64124 Nuvation Energy Multi-Stack Controller OS Command Injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: before 2.5.1...

8.7CVSS0.009EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/03 12:28 a.m.4 views

EUVD-2026-0768

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: before 2.5.1...

9.3CVSS6.2AI score0.009EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/03 12:0 a.m.5 views

PT-2026-1139

Name of the Vulnerable Software and Affected Versions Nuvation Energy Multi-Stack Controller MSC versions prior to 2.5.1 Description A flaw exists in Nuvation Energy Multi-Stack Controller MSC that allows for OS Command Injection due to improper neutralization of special elements used in an OS...

9.3CVSS7.2AI score0.009EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/01/03 12:0 a.m.3 views

Nuvation Energy Multi-Stack Controller 安全漏洞

The Nuvation Energy Multi-Stack Controller is a control unit within a battery management system from Nuvation Energy, Inc. A security vulnerability exists in Nuvation Energy Multi-Stack Controller versions prior to 2.5.1, which stems from improper neutralization of special elements in operating...

9.3CVSS6.5AI score0.009EPSS
Exploits0References2
Rows per page
Query Builder