Lucene search
+L

16898 matches found

RedhatCVE
RedhatCVE
•added 2026/01/03 10:04 p.m.•35 views

CVE-2025-64121

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Authentication Bypass.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

10CVSS7AI score0.00397EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/03 1:15 a.m.•16 views

CVE-2025-64124

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: before 2.5.1...

8.8CVSS7.7AI score0.0101EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/03 1:15 a.m.•15 views

CVE-2025-64124

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: before 2.5.1...

8.8CVSS0.0101EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/03 12:31 a.m.•20 views

EUVD-2025-206225

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Authentication Bypass.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

10CVSS8AI score0.00457EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/03 12:31 a.m.•19 views

EUVD-2025-206224

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller MSC: through 2.5.1...

9.3CVSS7.7AI score0.00457EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/03 12:31 a.m.•20 views

EUVD-2025-206226

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

9.4CVSS8AI score0.0101EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/03 12:28 a.m.•43 views

CVE-2025-64124

CVE-2025-64124 is an OS command injection in Nuvation Energy Multi-Stack Controller (MSC). Multiple connected sources (NVD, Red Hat advisories, CIRCL) confirm the issue affects MSC versions prior to 2.5.1 due to improper neutralization of special elements used in OS commands. The vulnerability ex...

8.8CVSS5.8AI score0.0101EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/01/03 12:28 a.m.•19 views

EUVD-2026-0768

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: before 2.5.1...

9.3CVSS7.7AI score0.0101EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/03 12:28 a.m.•57 views

CVE-2025-64124 Nuvation Energy Multi-Stack Controller OS Command Injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: before 2.5.1...

8.7CVSS0.0101EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/03 12:00 a.m.•18 views

Nuvation Energy Multi-Stack Controller 安全漏洞

The Nuvation Energy Multi-Stack Controller is a control unit within a battery management system from Nuvation Energy, Inc. A security vulnerability exists in Nuvation Energy Multi-Stack Controller versions prior to 2.5.1, which stems from improper neutralization of special elements in operating...

9.3CVSS7.7AI score0.0101EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/03 12:00 a.m.•13 views

PT-2026-1139

Name of the Vulnerable Software and Affected Versions Nuvation Energy Multi-Stack Controller MSC versions prior to 2.5.1 Description A flaw exists in Nuvation Energy Multi-Stack Controller MSC that allows for OS Command Injection due to improper neutralization of special elements used in an OS...

9.3CVSS7.8AI score0.0101EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/03 12:00 a.m.•2 views

CVE-2025-64124: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: before 2.5.1...

8.8CVSS5.8AI score0.0101EPSS
SaveExploits0References3
OSV
OSV
•added 2026/01/02 10:15 p.m.•16 views

CVE-2025-64121

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Authentication Bypass.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

9.8CVSS8AI score0.00457EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/02 10:15 p.m.•16 views

CVE-2025-64122

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller MSC: through 2.5.1...

5.5CVSS7.7AI score0.00457EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/02 10:15 p.m.•14 views

CVE-2025-64120

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

8.8CVSS8AI score0.0101EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/02 10:15 p.m.•23 views

CVE-2025-64120

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

9.4CVSS0.0101EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/02 10:15 p.m.•16 views

CVE-2025-64121

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Authentication Bypass.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

10CVSS0.00397EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/02 10:15 p.m.•23 views

CVE-2025-64122

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller MSC: through 2.5.1...

7.2CVSS0.00094EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/02 9:41 p.m.•5 views

CVE-2025-64123 Nuvation Energy Multi-Stack Controller Proxy service allows arbitrary BMS access

Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Network Boundary Bridging.This issue affects Multi-Stack Controller MSC: through and including release 2.5.1...

7.9CVSS8.1AI score0.00319EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/02 9:39 p.m.•51 views

CVE-2025-64122

CVE-2025-64122 describes an Insufficiently Protected Credentials vulnerability in the Nuvation Energy Multi-Stack Controller (MSC) that enables Signature Spoofing via Key Theft. Affected product: MSC versions up to and including 2.5.1. Root cause and impact are limited to credentials protection a...

7.2CVSS7.8AI score0.00094EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder