Browse CVEs

CRITICAL 9.6 CVE-2025-60739 Cross Site Request Forgery (CSRF) vulnerability in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before, Logic Version v6.00 - 2025_07_21 … Eve X1 Server Firmware No fix yet Fix from $2,3002025-11-25 CRITICAL 9.8 CVE-2025-60738 An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 - 2025_07_21 and before allows a remote attacker to e… Eve X1 Server Firmware Mitigation only Fix from $2,3002025-11-20 MEDIUM 6.1 CVE-2025-60737 Cross Site Scripting vulnerability in Ilevia EVE X1 Server Firmware Version<= 4.7.18.0.eden:Logic Version<=6.00 - 2025_07_21 allows a remote attacker… Eve X1 Server Firmware after 4.7.18.0 Fix from $1,6002025-11-20 CRITICAL 9.8 CVE-2025-34516 Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a use of default credentials vulnerability that allows an unauthenticated attacker to … Eve X1 Server Firmware after 4.7.18.0 Fix from $2,3002025-10-16 HIGH 7.5 CVE-2025-34517 Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an absolute path traversal vulnerability in get_file_content.php that allows an attack… Eve X1 Server Firmware after 4.7.18.0 Fix from $1,9502025-10-16 HIGH 7.5 CVE-2025-34518 Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a relative path traversal vulnerability in get_file_content.php that allows an attacke… Eve X1 Server Firmware after 4.7.18.0 Fix from $1,9502025-10-16 HIGH 7.5 CVE-2025-34519 Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an insecure hashing algorithm vulnerability. The product stores passwords using the MD… Eve X1 Server Firmware after 4.7.18.0 Fix from $1,9502025-10-16 CRITICAL 9.8 CVE-2025-34513EPSS 8% Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows an unauth… Eve X1 Server Firmware after 4.7.18.0 Fix from $2,3002025-10-16 CRITICAL 9.8 CVE-2025-34515EPSS 7% Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an execution with unnecessary privileges vulnerability in sync_project.sh that allows … Eve X1 Server Firmware after 4.7.18.0 Fix from $2,3002025-10-16 HIGH 8.8 CVE-2025-34514 Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain authenticated OS command injection vulnerabilities in multiple web-accessible PHP scri… Eve X1 Server Firmware after 4.7.18.0 Fix from $1,9502025-10-16 MEDIUM 6.1 CVE-2025-34512 Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a reflected cross-site scripting (XSS) vulnerability in index.php that allows an unaut… Eve X1 Server Firmware after 4.7.18.0 Fix from $1,6002025-10-16 CRITICAL 9.8 CVE-2025-34184 Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains an unauthenticated OS command injection vulnerability in the /ajax/php/login.php script. Remote… Eve X1 Server Firmware after 4.7.18.0 Fix from $2,3002025-09-16 CRITICAL 9.8 CVE-2025-34186 Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system() c… Eve X1 Server Firmware after 4.7.18.0 Fix from $2,3002025-09-16 HIGH 8.8 CVE-2025-34187 Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash sc… Eve X1 Server Firmware after 4.7.18.0 Fix from $1,9502025-09-16 HIGH 7.5 CVE-2025-34183 Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attacke… Eve X1 Server Firmware after 4.7.18.0 Fix from $1,9502025-09-16 HIGH 7.5 CVE-2025-34185 Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a pre-authentication file disclosure vulnerability via the 'db_log' POST parameter. Remote atta… Eve X1 Server Firmware after 4.7.18.0 Fix from $1,9502025-09-16