Vulnerability index

Browse CVEs

16 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Eve X1 Server Firmware CRITICAL 9.6
CVE-2025-60739

Cross Site Request Forgery (CSRF) vulnerability in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before, Logic Version v6.00 - 2025_07_21 …

No fix yet
Fix from $2,300 2025-11-25
Eve X1 Server Firmware CRITICAL 9.8
CVE-2025-60738

An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 - 2025_07_21 and before allows a remote attacker to e…

Mitigation only
Fix from $2,300 2025-11-20
Eve X1 Server Firmware MEDIUM 6.1
CVE-2025-60737

Cross Site Scripting vulnerability in Ilevia EVE X1 Server Firmware Version<= 4.7.18.0.eden:Logic Version<=6.00 - 2025_07_21 allows a remote attacker…

Fix: after 4.7.18.0
Fix from $1,600 2025-11-20
Eve X1 Server Firmware CRITICAL 9.8
CVE-2025-34516

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a use of default credentials vulnerability that allows an unauthenticated attacker to …

Fix: after 4.7.18.0
Fix from $2,300 2025-10-16
Eve X1 Server Firmware HIGH 7.5
CVE-2025-34517

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an absolute path traversal vulnerability in get_file_content.php that allows an attack…

Fix: after 4.7.18.0
Fix from $1,950 2025-10-16
Eve X1 Server Firmware HIGH 7.5
CVE-2025-34518

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a relative path traversal vulnerability in get_file_content.php that allows an attacke…

Fix: after 4.7.18.0
Fix from $1,950 2025-10-16
Eve X1 Server Firmware HIGH 7.5
CVE-2025-34519

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an insecure hashing algorithm vulnerability. The product stores passwords using the MD…

Fix: after 4.7.18.0
Fix from $1,950 2025-10-16
Eve X1 Server Firmware CRITICAL 9.8
CVE-2025-34513EPSS 8%

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows an unauth…

Fix: after 4.7.18.0
Fix from $2,300 2025-10-16
Eve X1 Server Firmware CRITICAL 9.8
CVE-2025-34515EPSS 7%

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an execution with unnecessary privileges vulnerability in sync_project.sh that allows …

Fix: after 4.7.18.0
Fix from $2,300 2025-10-16
Eve X1 Server Firmware HIGH 8.8
CVE-2025-34514

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain authenticated OS command injection vulnerabilities in multiple web-accessible PHP scri…

Fix: after 4.7.18.0
Fix from $1,950 2025-10-16
Eve X1 Server Firmware MEDIUM 6.1
CVE-2025-34512

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a reflected cross-site scripting (XSS) vulnerability in index.php that allows an unaut…

Fix: after 4.7.18.0
Fix from $1,600 2025-10-16
Eve X1 Server Firmware CRITICAL 9.8
CVE-2025-34184

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains an unauthenticated OS command injection vulnerability in the /ajax/php/login.php script. Remote…

Fix: after 4.7.18.0
Fix from $2,300 2025-09-16
Eve X1 Server Firmware CRITICAL 9.8
CVE-2025-34186

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system() c…

Fix: after 4.7.18.0
Fix from $2,300 2025-09-16
Eve X1 Server Firmware HIGH 8.8
CVE-2025-34187

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash sc…

Fix: after 4.7.18.0
Fix from $1,950 2025-09-16
Eve X1 Server Firmware HIGH 7.5
CVE-2025-34183

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attacke…

Fix: after 4.7.18.0
Fix from $1,950 2025-09-16
Eve X1 Server Firmware HIGH 7.5
CVE-2025-34185

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a pre-authentication file disclosure vulnerability via the 'db_log' POST parameter. Remote atta…

Fix: after 4.7.18.0
Fix from $1,950 2025-09-16