Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
MEDIUM 5.3
CVE-2025-30254
An unauthenticated attacker can obtain a serial number of a smart meter(s) using its owner's username.
Cloud Portal
after 3.6.0
HIGH 7.5
CVE-2025-27939
An attacker can change registered email addresses of other users and take over arbitrary accounts.
Cloud Portal
after 3.6.0
MEDIUM 5.3
CVE-2025-27568
An unauthenticated attacker can get users' emails by knowing usernames. A password reset email will be sent in response to this unsolicited request.
Cloud Portal
after 3.6.0
MEDIUM 5.3
CVE-2025-27938
Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "rooms").
Cloud Portal
after 3.6.0
MEDIUM 5.3
CVE-2025-24487
An unauthenticated attacker can infer the existence of usernames in the system by querying an API.
Cloud Portal
after 3.6.0