PatchTheCVECVEs published by Dragos, Inc.
CVEs published by Dragos, Inc. (CVE Numbering Authority). 11 tracked.
- CVE-2025-64121 CRITICAL 9.8 UPGRADE Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controll
- CVE-2025-64119 CRITICAL 9.3 A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affects Battery
- CVE-2025-64120 HIGH 8.8 UPGRADE Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nu
- CVE-2025-64124 HIGH 8.8 UPGRADE Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nu
- CVE-2025-64123 CRITICAL 9.8 UPGRADE Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network
- CVE-2025-64125 CRITICAL 9.4 A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected th
- CVE-2025-64122 MEDIUM 5.5 UPGRADE Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Sign
- CVE-2025-7676 MEDIUM 5.4 DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture
- CVE-2025-53696 CRITICAL 9.3 iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portio
- CVE-2025-53695 CRITICAL 9.4 OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even mor
- CVE-2024-1480 HIGH 7.5 Unitronics Vision Standard line of controllers allow the Information Mode password to be retrieved without aut