8158 matches found
Growatt Cloud Applications Information Disclosure Vulnerability (CNVD-2025-14965)
Growatt Cloud Applications is a monitoring platform from Growatt in China. An information disclosure vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to obtain information about another user's electric vehic...
Growatt Cloud Applications Information Disclosure Vulnerability (CNVD-2025-14963)
Growatt Cloud Applications is a monitoring platform from Growatt in China. An information disclosure vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to query the total energy consumption information of any...
Mitsubishi Electric多款产品 安全漏洞
Mitsubishi Electric CC-Link IE TSN Remote I/O module and others are products of Mitsubishi Electric Japan.Mitsubishi Electric CC-Link IE TSN Remote I/O module is an industrial Mitsubishi Electric CC-Link IE TSN Remote I/O module is a kind of industrial network technology, Remote I/O module is use...
CISA Releases Seven Industrial Control Systems Advisories
CISA released seven Industrial Control Systems ICS advisories on April 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-114-01 Schneider Electric Modicon Controllers ICSA-25-114-02 ALBEDO Telecom Net.Time -...
PT-2025-17665
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel’s USB subsystem, specifically within the cdns3 gadget driver. The issue occurs in the cdnsp gadget init and cdnsp gadget exit functions,...
PT-2025-17663
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the JFS filesystem. Specifically, the system does not properly validate the inode mode when loading from disk, potentially allowing corrupted...
PT-2025-17666
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s fbdev component related to bitblit operations and glyph indexing within the bit putcs function. Specifically, the glyph pointer calculation in bit put...
PT-2025-17664
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s NTFS3 implementation where $Extend records are incorrectly treated as regular files. This issue arose because of a requirement, introduced by commit...
CISA Releases Five Industrial Control Systems Advisories
CISA released five Industrial Control Systems ICS advisories on April 22, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-112-01 Siemens TeleControl Server Basic SQL ICSA-25-112-02 Siemens TeleControl Server...
PT-2025-17258 · Yokogawa Electric · Fx1000 +12
Name of the Vulnerable Software and Affected Versions: Yokogawa Electric Corporation GX10 / GX20 / GP10 / GP20 Paperless Recorders versions R5.04.01 or earlier Yokogawa Electric Corporation GM Data Acquisition System versions R5.05.01 or earlier Yokogawa Electric Corporation DX1000 / DX2000 /...
Yokogawa Electric 安全漏洞
Yokogawa Electric is a server owned by Yokogawa Electric Yokogawa, a Japanese company. A security vulnerability exists in Yokogawa Electric that stems from a disabled default authentication setting, which could lead to the unauthorized manipulation of critical data...
CVE-2025-31147
Unauthenticated attackers can query information about total energy consumed by EV chargers of arbitrary users...
CVE-2025-26857
Unauthenticated attackers can rename arbitrary devices of arbitrary users i.e., EV chargers...
CISA Releases Six Industrial Control Systems Advisories
CISA released six Industrial Control Systems ICS advisories on April 17, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-107-01 Schneider Electric Trio Q Licensed Data Radio ICSA-25-107-02 Schneider Electric...
CVE-2025-31147
Unauthenticated attackers can query information about total energy consumed by EV chargers of arbitrary users...
CVE-2025-31147
Unauthenticated attackers can query information about total energy consumed by EV chargers of arbitrary users...
CVE-2025-31950
An unauthenticated attacker can obtain EV charger energy consumption information of other users...
CVE-2025-27575
An unauthenticated attacker can obtain EV charger version and firmware upgrading history by knowing the charger ID...