Vulnerabilities

TI-2019-15322 CVE-2019-25268 · GHSA-jh9x-xg8c-g83m

NREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution

HIGH 78

NREL BEopt 2.8.0.0 contains a DLL hijacking vulnerability that allows attackers to load arbitrary libraries by tricking users into opening application files from remote shares.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00432 Published 2026-01-07 No fix listed CWE-427

TI-2015-08008 CVE-2015-10080 · GHSA-wp44-pr5g-pmq3

NREL api-umbrella-web Admin Data Table cross site scripting

LOW 28

A vulnerability was found in NREL api-umbrella-web 0.7.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00489 Published 2023-02-20 No fix listed CWE-79

TI-2015-08000 CVE-2015-10072 · GHSA-9p2h-h6xq-w8x2

NREL api-umbrella-web Flash Message cross site scripting

LOW 28

A vulnerability classified as problematic was found in NREL api-umbrella-web 0.7.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00535 Published 2023-02-04 No fix listed CWE-79

TI-2019-08193 CVE-2019-10974 · GHSA-4r7w-2gx2-27xp

Stack-based buffer overflow in National Renewable Energy Laboratory (NREL) EnergyPlus

LOW 25

NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from being overwritten with arbitrary code.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00337 Published 2019-07-25 No fix listed CWE-121

Vulnerabilities

Filters

NREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution

NREL api-umbrella-web Admin Data Table cross site scripting

NREL api-umbrella-web Flash Message cross site scripting

Stack-based buffer overflow in National Renewable Energy Laboratory (NREL) EnergyPlus