Filter and search through 195,929 vulnerabilities
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE-2025-36758 | It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an ora... | 0.0 | 0 | Neutral | No |
| No |
| CVE-2025-36757 | It is possible to bypass the administrator login screen on SolaX Cloud. An attacker could use parameter tampering to bypass the login screen and gain ... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-36756 | A problem with missing authorization on SolaX Cloud platform allows taking over any SolaX solarpanel inverter of which the serial number is known. | 0.0 | 0 | Neutral | No | No |
| CVE-2025-36755 | The CleverDisplay BlueOne hardware player is designed with its USB interfaces physically enclosed and inaccessible under normal operating conditions. ... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-36754 | The authentication mechanism on web interface is not properly implemented. It is possible to bypass authentication checks by crafting a post request w... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-36751 | Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to the network to in... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-36730 | A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will b... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-3673 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3092.. Reason: This candidate is a reservation duplicate of CVE-... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-3659 | Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: * Digi PortServer TS - p... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-36519 | Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2 and WRC-1167GST2. If a specially crafted file is uploaded by a remote aut... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-36513 | Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd.. If a user views a crafted page while logged in to... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-3651 | Improper Verification of Source of a Communication Channel in Work Desktop for Mac versions below 10.8.2.33 allows attackers to execute arbitrary comm... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-36506 | External control of file name or path issue exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If an attacker sends a specially cra... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-3648 | A vulnerability has been identified in the Now Platform that could result in data being inferred without authorization. Under certain conditional acce... | 0.0 | 0 | Neutral | Yes | No |
| CVE-2025-3639 | Liferay Portal 7.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.... | 0.0 | 0 | Neutral | Yes | Yes |
| CVE-2025-35980 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not a... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-35978 | Improper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1.4 L10 to L33 and UpdateNaviInstallService Service 1.... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-3579 | In versions prior to Aidex 1.7, an authenticated malicious user, taking advantage of an open registry, could execute unauthorised commands within the ... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-3578 | A malicious, authenticated user in Aidex, versions prior to 1.7, could list credentials of other users, create or modify existing users in the applica... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-3575 | Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "... | 0.0 | 0 | Neutral | No | No |