CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| MÉDIO5.4 |
An authenticated attacker can achieve stored XSS by exploiting improper sanitization of the plant name value while adding or editing a plant. |
| 15/04/2025 |
| CVE-2025-30254 | MÉDIO5.3 | An unauthenticated attacker can obtain a serial number of a smart meter(s) using its owner's username. | 15/04/2025 |
| CVE-2025-27939 | ALTO7.5 | An attacker can change registered email addresses of other users and take over arbitrary accounts. | 15/04/2025 |
| CVE-2025-27938 | MÉDIO5.3 | Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "rooms"). | 15/04/2025 |
| CVE-2025-27568 | MÉDIO5.3 | An unauthenticated attacker can get users' emails by knowing usernames. A password reset email will be sent in response to this unsolicited request. | 15/04/2025 |
| CVE-2025-24487 | MÉDIO5.3 | An unauthenticated attacker can infer the existence of usernames in the system by querying an API. | 15/04/2025 |