CyberDanube

Latest CVEs · RSS

• CVE-2025-15683 2026-08-10 · CVSS 8.8
  TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An unauthenticated remote attacker can invo
• CVE-2025-15682 2026-08-10 · CVSS 8.7
  TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server. An unauthenticated remote attacker can send PUT r
• CVE-2025-15681 2026-08-10 · CVSS 9.2
  TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authenticated to the device, an unauthenticated a
• CVE-2025-15680 2026-08-10 · CVSS 2.4
  TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection. A physically proximate attacker can connect
• CVE-2025-13294 2026-08-10 · CVSS 9.3
  An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP endpoints incorporate attacker-controlle
• CVE-2025-13293 2026-08-10 · CVSS 9.3
  A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the de
• CVE-2026-65313 2026-07-31 · CVSS 8.1
  A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, hard-coded x11vnc password. Because the same c
• CVE-2026-65311 2026-07-31 · CVSS 5.3
  The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions exposes an undocumented endpoint that changes the server's logging lev
• CVE-2026-65310 2026-07-31 · CVSS 7.5
  ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and configuration endpoint without any authenticati
• CVE-2026-65309 2026-07-31 · CVSS 7.5
  ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. T
• CVE-2026-8989 2026-07-21 · CVSS 8.6
  Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attack
• CVE-2026-8988 2026-07-21 · CVSS 8.6
  Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot
• CVE-2026-8987 2026-07-21 · CVSS 9.4
  Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint. An auth
• CVE-2026-8986 2026-07-21 · CVSS 9.5
  Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromis
• CVE-2026-8985 2026-07-21 · CVSS 10.0
  Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002. An unauthenticated att
• CVE-2026-8984 2026-07-21 · CVSS 10.0
  Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002. A crafted request t
• CVE-2026-8983 2026-07-21 · CVSS 10.0
  Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoi
• CVE-2026-8982 2026-07-21 · CVSS 10.0
  Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51. The accounts use vendor-defined password derivation mechanism
• CVE-2026-8980 2026-05-28 · CVSS 9.3
  The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation. An authenticated low-privileged user can change the passwords of
• CVE-2026-8979 2026-05-28 · CVSS 9.3
  The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication bypass. An unauthenticated remote attacker can change the password of
• CVE-2025-9966 2025-09-23 · CVSS 7.3
  Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P seri
• CVE-2025-9965 2025-09-23 · CVSS 9.3
  Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue
• CVE-2025-9964 2025-09-23 · CVSS 8.6
  No password for the root user is set in Novakon P series. This allows phyiscal attackers to enter the console easily. This issue affects P series: P – V2001.A.
• CVE-2025-9963 2025-09-23 · CVSS 9.4
  A path traversal vulnerability in Novakon P series allows to expose the root file system "/" and modify all files with root permissions. This way the system can
• CVE-2025-9962 2025-09-23 · CVSS 10.0
  A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authentication.This issue affects P series: P – V2001