CVE-2025-8075Medium· 5.4▾ SunlitCybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability could allow an attacker to XSS on the user's browser. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
xno-8082r_firmware < 2.24.00xnv-8082r_firmware < 2.24.00xnd-8082rf_firmware < 2.24.00xnd-8082rv_firmware < 2.24.00xnb-8002_firmware < 2.24.00pnm-9084qz1_firmware < 2.23.00pnm-9084rqz1_firmware < 2.23.00pnm-9085rqz1_firmware < 2.23.00pnm-9322vqp_firmware < 2.23.00qnv-c9083r_firmware < 2.22.10qno-c9083r_firmware < 2.22.10qnv-c8083r_firmware < 2.22.10qno-c8083r_firmware < 2.22.10qnv-c9011r_firmware < 2.22.10qnv-c8011r_firmware < 2.22.10qnv-c8012_firmware < 2.22.10qne-c9013rl_firmware < 2.22.10qne-c8013rl_firmware < 2.22.10qnv-c6083r_firmware < 2.22.10qno-c6083r_firmware < 2.22.10tnv-c8011rw_firmware < 2.22.10qnv-c8013r_firmware < 2.22.10qno-c8013r_firmware < 2.22.10qnd-c8013r_firmware < 2.22.10qnv-c8023r_firmware < 2.22.10qno-c8023r_firmware < 2.22.10qnd-c8023r_firmware < 2.22.10tnv-c8014rm_firmware < 2.22.10tnv-c8034rm_firmware < 2.22.10qnf-c9010_firmware < 2.22.10qnf-c9010v_firmware < 2.22.10xnb-6001_firmware < 2.10.06xnf-8010r_firmware < 2.10.07xnf-8010rv_firmware < 2.10.07xnf-8010rvm_firmware < 2.10.07xnf-8010rvmnb_firmware < 2.10.07xnf-8010rvw_firmware < 2.10.07xnf-8010rw_firmware < 2.10.07qnf-8010_firmware < 2.10.03tnv-7010rc_firmware < 2.10.03qnp-6320r_firmware < 2.21.07qnp-6250r_firmware < 2.21.07xnz-l6320_firmware < 2.10.03xnz-6320_firmware < 2.10.03xno-6120_firmware < 2.10.04xnv-l6080r_firmware < 2.23.01xnd-l6080rva_firmware < 2.23.01xnd-l6080va_firmware < 2.23.01xno-l6080ra_firmware < 2.23.01xnv-l6080a_firmware < 2.23.01xnv-l6080ra_firmware < 2.23.01qnp-6320h_firmware < 2.23.01qnp-6320_firmware < 2.23.01qnp-6250h_firmware < 2.23.01qnp-6250_firmware < 2.23.01xnp-6341rh_firmware < 2.23.01xno-9082rz_firmware < 2.24.00xnv-9082r_firmware < 2.24.00xnd-9082rf_firmware < 2.24.00xnd-9082rv_firmware < 2.24.00xnb-9002_firmware < 2.24.00xnf-9010rv_firmware < 2.24.00xnf-9010rs_firmware < 2.24.00xnf-9010rvm_firmware < 2.24.00xnd-c7083rv_firmware < 2.24.00xno-c7083r_firmware < 2.24.00xnv-c7083r_firmware < 2.24.00xnd-c6083rv_firmware < 2.24.00xnv-c6083r_firmware < 2.24.00xnv-c6083_firmware < 2.24.00xno-c6083r_firmware < 2.24.00xno-c9083r_firmware < 2.24.00xnd-c9083rv_firmware < 2.24.00xnv-c9083r_firmware < 2.24.00xno-c8083r_firmware < 2.24.00xnv-c8083r_firmware < 2.24.00xnd-c8083rv_firmware < 2.24.00xnb-6003_firmware < 2.24.00xno-6083r_firmware < 2.24.00xnv-6083r_firmware < 2.24.00xnd-6083rv_firmware < 2.24.00xno-8083r_firmware < 2.24.00xnv-8093r_firmware < 2.24.00xnv-8083r_firmware < 2.24.00xnv-8083rvx_firmware < 2.24.00xnd-8093rv__firmware < 2.24.00xnd-8083rv__firmware < 2.24.00xnd-8083rvx_firmware < 2.24.00xnb-8003_firmware < 2.24.00xnv-8083rx__firmware < 2.24.00xnd-9083rv__firmware < 2.24.00xno-9083r_firmware < 2.24.00xnv-9083r_firmware < 2.24.00xnb-9003_firmware < 2.24.00xnv-6123r_firmware < 2.24.00xno-6123r_firmware < 2.24.00knd-5020rn_firmware < 2.23.01xnd-8020r_firmware < 2.23.01xnd-8020rw_firmware < 2.23.01xnd-8030r_firmware < 2.23.01Upgrade past the affected range:
xno-8082r_firmware 2.24.00xnv-8082r_firmware 2.24.00xnd-8082rf_firmware 2.24.00xnd-8082rv_firmware 2.24.00xnb-8002_firmware 2.24.00pnm-9084qz1_firmware 2.23.00pnm-9084rqz1_firmware 2.23.00pnm-9085rqz1_firmware 2.23.00pnm-9322vqp_firmware 2.23.00qnv-c9083r_firmware 2.22.10qno-c9083r_firmware 2.22.10qnv-c8083r_firmware 2.22.10qno-c8083r_firmware 2.22.10qnv-c9011r_firmware 2.22.10qnv-c8011r_firmware 2.22.10qnv-c8012_firmware 2.22.10qne-c9013rl_firmware 2.22.10qne-c8013rl_firmware 2.22.10qnv-c6083r_firmware 2.22.10qno-c6083r_firmware 2.22.10tnv-c8011rw_firmware 2.22.10qnv-c8013r_firmware 2.22.10qno-c8013r_firmware 2.22.10qnd-c8013r_firmware 2.22.10qnv-c8023r_firmware 2.22.10qno-c8023r_firmware 2.22.10qnd-c8023r_firmware 2.22.10tnv-c8014rm_firmware 2.22.10tnv-c8034rm_firmware 2.22.10qnf-c9010_firmware 2.22.10qnf-c9010v_firmware 2.22.10xnb-6001_firmware 2.10.06xnf-8010r_firmware 2.10.07xnf-8010rv_firmware 2.10.07xnf-8010rvm_firmware 2.10.07xnf-8010rvmnb_firmware 2.10.07xnf-8010rvw_firmware 2.10.07xnf-8010rw_firmware 2.10.07qnf-8010_firmware 2.10.03tnv-7010rc_firmware 2.10.03qnp-6320r_firmware 2.21.07qnp-6250r_firmware 2.21.07xnz-l6320_firmware 2.10.03xnz-6320_firmware 2.10.03xno-6120_firmware 2.10.04xnv-l6080r_firmware 2.23.01xnd-l6080rva_firmware 2.23.01xnd-l6080va_firmware 2.23.01xno-l6080ra_firmware 2.23.01xnv-l6080a_firmware 2.23.01xnv-l6080ra_firmware 2.23.01qnp-6320h_firmware 2.23.01qnp-6320_firmware 2.23.01qnp-6250h_firmware 2.23.01qnp-6250_firmware 2.23.01xnp-6341rh_firmware 2.23.01xno-9082rz_firmware 2.24.00xnv-9082r_firmware 2.24.00xnd-9082rf_firmware 2.24.00xnd-9082rv_firmware 2.24.00xnb-9002_firmware 2.24.00xnf-9010rv_firmware 2.24.00xnf-9010rs_firmware 2.24.00xnf-9010rvm_firmware 2.24.00xnd-c7083rv_firmware 2.24.00xno-c7083r_firmware 2.24.00xnv-c7083r_firmware 2.24.00xnd-c6083rv_firmware 2.24.00xnv-c6083r_firmware 2.24.00xnv-c6083_firmware 2.24.00xno-c6083r_firmware 2.24.00xno-c9083r_firmware 2.24.00xnd-c9083rv_firmware 2.24.00xnv-c9083r_firmware 2.24.00xno-c8083r_firmware 2.24.00xnv-c8083r_firmware 2.24.00xnd-c8083rv_firmware 2.24.00xnb-6003_firmware 2.24.00xno-6083r_firmware 2.24.00xnv-6083r_firmware 2.24.00xnd-6083rv_firmware 2.24.00xno-8083r_firmware 2.24.00xnv-8093r_firmware 2.24.00xnv-8083r_firmware 2.24.00xnv-8083rvx_firmware 2.24.00xnd-8093rv__firmware 2.24.00xnd-8083rv__firmware 2.24.00xnd-8083rvx_firmware 2.24.00xnb-8003_firmware 2.24.00xnv-8083rx__firmware 2.24.00xnd-9083rv__firmware 2.24.00xno-9083r_firmware 2.24.00xnv-9083r_firmware 2.24.00xnb-9003_firmware 2.24.00xnv-6123r_firmware 2.24.00xno-6123r_firmware 2.24.00knd-5020rn_firmware 2.23.01xnd-8020r_firmware 2.23.01xnd-8020rw_firmware 2.23.01xnd-8030r_firmware 2.23.01Connected by shared product, vendor, weakness, or advisory.
CVE-2025-34157Critical· 9.0Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project creation workflow
CVE-2025-48612High· 7.8In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setting due to improper input validation
CVE-2025-48601Medium· 5.5In multiple locations, there is a possible permanent denial of service due to improper input validation
CVE-2023-22491High· 8.1Gatsby is a free and open source framework based on React that helps developers build websites and apps
CVE-2025-7062Medium· 5.2A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module `h5p-nodejs-library` by Lumi Education UG in versions up to and including 10.0.4
CVE-2021-45105Medium· 5.9Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups