Lucene search
+L

8158 matches found

CNNVD
CNNVD
added 2026/02/27 12:00 a.m.18 views

EV2GO 安全漏洞

EV2GO is a electric vehicle charging facility management platform operated by the Russian company EV2GO. EV2GO has security vulnerabilities; these vulnerabilities stem from the lack of a limit on the number of authentication requests. This could allow attackers to carry out denial-of-service...

9.8CVSS5.8AI score0.00521EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/27 12:00 a.m.20 views

WordPress plugin Electric Enquiries 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

6.4CVSS5.8AI score0.0024EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/27 12:00 a.m.14 views

PT-2026-22328

The Electric Enquiries plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button' parameter of the electric-enquiry shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS6AI score0.0024EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/02/26 11:54 p.m.21 views

WordPress Electric Enquiries plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'button' Shortcode Attribute vulnerability discovered by zakaria in WordPress Plugin Electric Enquiries versions = 1.1...

6.4CVSS5.3AI score0.0024EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/02/26 11:50 p.m.26 views

CVE-2026-22890

Technical details are not publicly available in the provided documents. Monitor for updates from the listed sources to determine affected products, root cause, impact, and remediation.

6.9CVSS5.2AI score0.00298EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/02/26 11:46 p.m.27 views

CVE-2026-25945

The CVE-2026-25945 issue concerns the WebSocket API, where there is no limit on authentication attempts. This vulnerability could allow an attacker to perform denial-of-service by suppressing or misrouting charger telemetry, or carry out brute-force attempts to gain unauthorized access. Connected...

9.8CVSS5.4AI score0.00521EPSS
SaveExploits0References3Affected Software1
ICS
ICS
added 2026/02/17 7:00 a.m.17 views

GE Vernova Enervista UR Setup

RISK EVALUATION Successful exploitation of these vulnerabilities may allow code execution with elevated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network exposure for all...

2.9CVSS6.4AI score0.00238EPSS
SaveExploits0References11
EUVD
EUVD
added 2026/02/15 10:48 a.m.18 views

EUVD-2025-206902

There is a misconfiguration vulnerability inside the Infotainment ECU manufactured by BOSCH. The vulnerability happens during the startup phase of a specific systemd service, and as a result, the following developer features will be activated: the disabled firewall and the launched SSH server...

6.8CVSS5.5AI score0.00202EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/02/14 7:23 a.m.15 views

CVE-2025-48019

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...

6.5CVSS5.2AI score0.00222EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/14 7:23 a.m.31 views

CVE-2025-48022

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...

6.5CVSS5.2AI score0.0018EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/14 7:23 a.m.17 views

CVE-2025-1924

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receive maliciously crafted packets, a DoS attack may cause Vnet/IP communication functions to stop or arbitrary programs to be executed. The affected products and versions a...

8.2CVSS5.5AI score0.002EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/13 4:54 a.m.9 views

CVE-2025-48020

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...

6CVSS5.2AI score0.0024EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/13 12:00 a.m.43 views

PT-2026-7968

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...

6CVSS5.2AI score0.0018EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/13 12:00 a.m.17 views

Yokogawa Electric Vnet/IP Interface 安全漏洞

Yokogawa Electric Vnet/IP Interface is a real-time control network interface developed by Yokogawa Electric Corporation. Versions of Yokogawa Electric Vnet/IP Interface prior to R1.07.00 contained a security vulnerability. This vulnerability stemmed from the handling of malicious data packets,...

6.5CVSS5.8AI score0.0018EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/13 12:00 a.m.21 views

Yokogawa Electric Corporation Vnet/IP Interface 安全漏洞

Yokogawa Electric Corporation Vnet/IP Interface is a real-time control network interface of Yokogawa Corporation. Versions of Yokogawa Electric Corporation Vnet/IP Interface prior to R1.07.00 contained a security vulnerability. This vulnerability stemmed from the handling of malicious data packet...

6.5CVSS5.8AI score0.00222EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/13 12:00 a.m.19 views

Yokogawa Electric Vnet/IP Interface 安全漏洞

Yokogawa Electric Vnet/IP Interface is a real-time control network interface developed by Yokogawa Electric Corporation. Versions of Yokogawa Electric Vnet/IP Interface prior to R1.07.00 contained a security vulnerability. This vulnerability stemmed from the handling of malicious data packets,...

6.5CVSS5.8AI score0.0018EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/02/12 12:00 a.m.17 views

Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.1AI score0.00356EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/02/12 12:00 a.m.17 views

Schneider Electric EcoStruxure Power Build SSD File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.1AI score0.00356EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/02/12 12:00 a.m.14 views

Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.1AI score0.00356EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2026/02/12 12:00 a.m.15 views

Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

7.8CVSS6.1AI score0.00356EPSS
SaveExploits0References1
Rows per page
Query Builder