CyberSecBulletin

Steve-community vulnerabilities

We track 2 vulnerabilities in Steve-community products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 13, 2024.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Steve-community vulnerabilities

  • 7.5 High severity

    Steve: Insufficient Entropy

    CVE-2024-25407Steve-community

    SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow attackers to cause a Denial of Service (DoS) by using the predicted transaction ID's to terminate other transactions.

  • 7.5 High severity

    Ocpp-jaxb: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2023-52096Steve-community

    SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a timestamp parameter of 1000000). This may le