← All credits
Max van der Horst (DIVD)
35 vulnerability records and advisories credit this contributor.
CVE-2024-21878
Command Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.x
CVE-2024-21876
Unauthenticated Path Traversal via URL Parameter in Enphase IQ Gateway version < 8.2.4225
CVE-2024-21880
URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway version 4.x <= 7.x
CVE-2024-21879
URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway v4.x to v8.x and < v8.2.4225
CVE-2024-21877
Insecure File Generation Based on User Input in Enphase IQ Gateway version 4.x to 8.x and < 8.2.4225
CVE-2024-21881
Upload of encrypted packages allows authenticated command execution in Enphase IQ Gateway v4.x and v5.x
CVE-2023-25912
Webreport disclosure to unauthorized actor in Danfoss AK-EM100
CVE-2023-22584
Cleartext credentials in Danfoss AK-EM100
CVE-2023-22585
Reflected Cross-Site Scripting in Danfoss AK-EM100
CVE-2023-25911
Authenticated OS Command Injection in Danfoss AK-EM100