6.9

CVSS4.0

CVE-2025-27927 - Growatt Cloud portal Authorization Bypass Through User-Controlled Key

An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API.

📅 Published: April 15, 2025, 9:43 p.m. 🔄 Last Modified: Nov. 14, 2025, 6:12 p.m.

9.3

CVSS4.0

CVE-2025-24297 - Growatt Cloud portal Cross-site Scripting

Due to lack of server-side input validation, attackers can inject malicious JavaScript code into users personal spaces of the web portal.

📅 Published: April 15, 2025, 9:39 p.m. 🔄 Last Modified: Nov. 14, 2025, 6:14 p.m.

9.3

CVSS4.0

CVE-2025-30510 - Growatt Cloud portal Insufficient Type Distinction

An attacker can upload an arbitrary file instead of a plant image.

📅 Published: April 15, 2025, 9:36 p.m. 🔄 Last Modified: Nov. 14, 2025, 6:12 p.m.

6.9

CVSS4.0

CVE-2025-24850 - Growatt Cloud portal Authorization Bypass Through User-Controlled Key

An attacker can export other users' plant information.

📅 Published: April 15, 2025, 9:33 p.m. 🔄 Last Modified: Nov. 14, 2025, 6:14 p.m.

0.0

CVE-2025-36542 -

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

📅 Published: April 15, 2025, 9:28 p.m. 🔄 Last Modified: Feb. 13, 2026, 6:11 p.m.

0.0

CVE-2025-36534 -

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

📅 Published: April 15, 2025, 9:28 p.m. 🔄 Last Modified: Feb. 13, 2026, 6:11 p.m.

0.0

CVE-2025-36545 -

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

📅 Published: April 15, 2025, 9:28 p.m. 🔄 Last Modified: Feb. 13, 2026, 6:11 p.m.

0.0

CVE-2025-31145 -

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

📅 Published: April 15, 2025, 9:28 p.m. 🔄 Last Modified: Feb. 13, 2026, 6:11 p.m.

0.0

CVE-2025-36552 -

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

📅 Published: April 15, 2025, 9:28 p.m. 🔄 Last Modified: Feb. 13, 2026, 6:10 p.m.

0.0

CVE-2025-30517 -

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused

📅 Published: April 15, 2025, 9:28 p.m. 🔄 Last Modified: Feb. 13, 2026, 6:11 p.m.
Total resulsts: 349182
Page 5803 of 34,919
« previous page » next page
Filters