CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통5.4 |
An authenticated attacker can achieve stored XSS by exploiting improper sanitization of the plant name value while adding or editing a plant. |
| 15/04/2025 |
| CVE-2025-30254 | 보통5.3 | An unauthenticated attacker can obtain a serial number of a smart meter(s) using its owner's username. | 15/04/2025 |
| CVE-2025-27939 | 높음7.5 | An attacker can change registered email addresses of other users and take over arbitrary accounts. | 15/04/2025 |
| CVE-2025-27938 | 보통5.3 | Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "rooms"). | 15/04/2025 |
| CVE-2025-27568 | 보통5.3 | An unauthenticated attacker can get users' emails by knowing usernames. A password reset email will be sent in response to this unsolicited request. | 15/04/2025 |
| CVE-2025-24487 | 보통5.3 | An unauthenticated attacker can infer the existence of usernames in the system by querying an API. | 15/04/2025 |