Explore CVE records

HighPublished 11 Mar 2025, 21:01 WIB

CVE-2024-54084

SMM Arbitrary Write via TOCTOU Vulnerability

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution.

Excerpt language: en.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated11 Mar 2025, 21:45 WIB

Official record

CritKEVPublished 11 Mar 2025, 21:00 WIB

CVE-2024-54085

Redfish Authentication Bypass

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

Excerpt language: en.

MedPublished 11 Mar 2025, 21:00 WIB

CVE-2025-2196

MRCMS org.marker.mushroom.controller.FileController upload.do upload cross site scripting

A vulnerability was found in MRCMS 3.1.2. It has been declared as problematic. Affected by this vulnerability is the function upload of the file /admin/file/upload.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument path leads to cross site scripting. The attack can be la…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated11 Mar 2025, 21:48 WIB

Official record

HighPublished 11 Mar 2025, 20:40 WIB

CVE-2025-22369

Mennekes smart/premium charges systems, Arbitrary file download using ReadFile endpoint

The ReadFile endpoint of the firmware for Mennekes Smart / Premium Chargingpoints can be abused to read arbitrary files from the underlying OS.

Excerpt language: en.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 Apr 2025, 11:47 WIB

Official record

HighPublished 11 Mar 2025, 20:40 WIB

CVE-2025-22366

Mennekes smart/premium charges systems, Command injection in firmware upgrade

The authenticated firmware update capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS.

Excerpt language: en.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated09 Oct 2026, 02:56 WIB

Official record

MedPublished 11 Mar 2025, 20:40 WIB

CVE-2025-22370

Mennekes smart/premium charges systems, SQL Injection in web configuration interface

Many fields for the web configuration interface of the firmware for Mennekes Smart / Premium Chargingpoints can be abused to execute arbitrary SQL commands because the values are insufficiently neutralized.

Excerpt language: en.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Apr 2025, 11:47 WIB

Official record

HighPublished 11 Mar 2025, 20:40 WIB

CVE-2025-22368

Mennekes smart/premium charges systems, Command injection in sCU firmware update

The authenticated SCU firmware command of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS commands are improperly neutralized when certain fields are passed to the underlying OS.

Excerpt language: en.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Apr 2025, 11:47 WIB

Official record

HighPublished 11 Mar 2025, 20:40 WIB

CVE-2025-22367

Mennekes smart/premium charges systems, Command injection in time setting

The authenticated time setting capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS.

Excerpt language: en.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Apr 2025, 11:47 WIB

Official record

MedPublished 11 Mar 2025, 20:31 WIB

CVE-2025-2195

MRCMS org.marker.mushroom.controller.FileController rename.do rename cross site scripting

A vulnerability was found in MRCMS 3.1.2. It has been classified as problematic. Affected is the function rename of the file /admin/file/rename.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument name/path leads to cross site scripting. It is possible to launch the attack…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated11 Mar 2025, 20:38 WIB

Official record

MedPublished 11 Mar 2025, 20:31 WIB

CVE-2025-2194

MRCMS org.marker.mushroom.controller.FileController list.do list cross site scripting

A vulnerability was found in MRCMS 3.1.2 and classified as problematic. This issue affects the function list of the file /admin/file/list.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument path leads to cross site scripting. The attack may be initiated remotely. The expl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated11 Mar 2025, 20:39 WIB

Official record

HighKEVPublished 11 Mar 2025, 20:28 WIB

CVE-2025-27363

An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8.1v3.1KEVListedEPSSPresentUpdated20 Apr 2026, 05:08 WIB

Official record

MedPublished 11 Mar 2025, 20:00 WIB

CVE-2025-2193

MRCMS org.marker.mushroom.controller.FileController delete.do delete path traversal

A vulnerability has been found in MRCMS 3.1.2 and classified as critical. This vulnerability affects the function delete of the file /admin/file/delete.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument path/name leads to path traversal. The attack can be initiated remot…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated11 Mar 2025, 20:48 WIB

Official record

MedPublished 11 Mar 2025, 20:00 WIB

CVE-2025-2192

Stoque Zeev.it Login Page server-side request forgery

A vulnerability, which was classified as problematic, was found in Stoque Zeev.it 4.24. This affects an unknown part of the file /Login?inpLostSession=1 of the component Login Page. The manipulation of the argument inpRedirectURL leads to server-side request forgery. It is possible to initiate the attack remotely. The …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated11 Mar 2025, 20:50 WIB

Official record

MedPublished 11 Mar 2025, 19:00 WIB

CVE-2025-2191

Claro A7600-A1 Ping6 Diagnóstico form2pingv6.cgi cross site scripting

A vulnerability, which was classified as problematic, has been found in Claro A7600-A1 RNR4-A72T-2x16_v2110403_CLA_32_160817. Affected by this issue is some unknown functionality of the file /form2pingv6.cgi of the component Ping6 Diagnóstico. The manipulation of the argument ip6addr with the input <img/src/onerror=pro…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated11 Mar 2025, 20:14 WIB

Official record

MedPublished 11 Mar 2025, 18:40 WIB

CVE-2025-2189

Information Disclosure Vulnerability in Tinxy Smart Devices

This vulnerability exists in the Tinxy smart devices due to storage of credentials in plaintext within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the plaintext credentials stored on the vulnerable device.

Excerpt language: en.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated11 Mar 2025, 20:15 WIB

Official record

CritPublished 11 Mar 2025, 16:48 WIB

CVE-2025-27494

A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sanitize input for the pubkey endpoint of the REST API. This could allow an authenticated remote administrator to escalate privileges by injecti…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated11 Mar 2025, 20:21 WIB

Official record

CritPublished 11 Mar 2025, 16:48 WIB

CVE-2025-27493

A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC-AP (All versions < V6.4.9). Affected devices improperly sanitize user input for specific commands on the telnet command line interface. This could allow an authenticated local administrator to escalat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated11 Mar 2025, 20:23 WIB

Official record

HighPublished 11 Mar 2025, 16:48 WIB

CVE-2025-27438

A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All ve…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.3v4.0KEVNot listedEPSSPresentUpdated11 Mar 2025, 20:26 WIB

Official record

LowPublished 11 Mar 2025, 16:48 WIB

CVE-2025-27398

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly neutralize special characters when interpreting user controlled log paths. This could allow an authenticated highly-privileged remote attacker to execute a limited set of binaries that a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated11 Mar 2025, 20:30 WIB

Official record

MedPublished 11 Mar 2025, 16:48 WIB

CVE-2025-27397

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit user controlled paths to which logs are written and from where they are read. This could allow an authenticated highly-privileged remote attacker to read and write arbitrary files …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated11 Mar 2025, 20:35 WIB

Official record

Find the CVE cohort

Severity

Matching records by UTC month

Signal coverage

Find the CVE cohort

Matching cohort composition

Severity

Matching records by UTC month

Signal coverage