25065 matches found
CVE-2026-51565
Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request...
Microsoft Fixes Certighost Flaw That Allowed Domain Controller Impersonation
Certighost allowed a low-privilege domain user obtain a valid Domain Controller certificate through AD CS. Microsoft patched the issue in the July security updates...
EUVD-2026-49590
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eircreateadvdata builds the advertising data into a fixed-size buffer "size", 31 for the legacy path. It may prepend a 3-byte "Flags" AD structure LEADNOBREDR on an...
CVE-2025-59181
Ericsson Packet Core Controller PCC versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users...
CVE-2025-59178
Ericsson Packet Core Controller PCC versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system...
CVE-2025-59181 Path traversal Vulnerability
Ericsson Packet Core Controller PCC versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users...
CVE-2025-59181 Path traversal Vulnerability
Ericsson Packet Core Controller PCC versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users...
EUVD-2025-210516
Ericsson Packet Core Controller PCC versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users...
CVE-2025-59180 Use of Hard-coded Credentials Vulnerability
Ericsson Packet Core Controller PCC versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information...
CVE-2025-59180
CVE-2025-59180 concerns Ericsson Packet Core Controller (PCC) prior to version 1.38. The vulnerability is a hardcoded credential in the alarm system. An attacker with access to the cluster and knowledge of the hardcoded credential can read alarm and alert information. The entry notes a CVSS v4.0 ...
CVE-2025-59178 Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability
Ericsson Packet Core Controller PCC versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system...
CVE-2025-59178 Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability
Ericsson Packet Core Controller PCC versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system...
EUVD-2025-210514
Ericsson Packet Core Controller PCC versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system...
CVE-2025-59178
Ericsson Packet Core Controller PCC versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system...
CVE-2025-59178
CVE-2025-59178 affects Ericsson Packet Core Controller (PCC) prior to 1.39. The vulnerability arises in Configuration Management, exposing sensitive system information that allows an attacker to enumerate other users on the system. According to the CVSS metrics, the impact is primarily on confide...
CVE-2025-59177 Generation of Error Message Containing Sensitive Information Vulnerability
Ericsson Packet Core Controller PCC versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages...
CVE-2025-59177
Ericsson Packet Core Controller PCC versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages...
CVE-2025-59177 Generation of Error Message Containing Sensitive Information Vulnerability
Ericsson Packet Core Controller PCC versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages...