PT-2025-43532

Name of the Vulnerable Software and Affected Versions Tibbo AggreGate Network Manager versions prior to 6.40.05 Description The login functionality exhibits a discrepancy in authentication failure messages. These messages vary depending on whether a provided username exists, potentially enabling ...

CVE-2025-34155: Observable Response Discrepancy

Tibbo AggreGate Network Manager 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can...

CVE-2025-34156: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Tibbo AggreGate Network Manager 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses Java system properties, server path details, and version information to unauthorized users, resulting in information disclosure that could ai...

Tibbo AggreGate Network Manager 安全漏洞

Tibbo AggreGate Network Manager is a network monitoring and IT management platform from Tibbo. A security vulnerability exists in Tibbo AggreGate Network Manager versions prior to 6.40.05, which stems from an observable response discrepancy in the login function that could lead to user enumeratio...

CISCO-SA-20150401-DCNM

creationtimestamp| type| source ---|---|--- 2025-10-22 01:44:36+00:00| seen| Telegram/7Y6xRPttz6yg5mhYf8lGc69MunkWLUZZfWY4ZXqRbESpzn4...

JLSEC-2025-165 An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

CVE-2025-27258

Ericsson Network Manager ENM versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege...

CVE-2025-27259

Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains...

EUVD-2025-33967

Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains...

EUVD-2025-33966

Ericsson Network Manager ENM versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege...

CVE-2025-27258

Ericsson Network Manager ENM versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege...

CVE-2025-27259

Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains...

CVE-2025-27259

Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains...

CVE-2025-27258

Ericsson Network Manager ENM versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege...

CVE-2025-27258 Ericsson Network Manager: escalation of privilege vulnerability

Ericsson Network Manager ENM versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege...

CVE-2025-27258 Ericsson Network Manager: escalation of privilege vulnerability

Ericsson Network Manager ENM versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege...

CVE-2025-27258

Ericsson Network Manager (ENM) is affected in versions prior to ENM 25.1 GA, where a vulnerability could lead to an escalation of privilege if exploited. The issue is documented across multiple sources (NVD, Red Hat, EUVD, CVE listings). Practical impact is limited to privilege escalation within ...

CVE-2025-27259

CVE-2025-27259 affects Ericsson Network Manager prior to ENM 25.2 GA. Root cause is improper neutralization of user controlled input. Impact described as exfiltration of limited data or redirect to other sites/domains. No exploitation details are provided in the sources; reported remediation is t...

CVE-2025-27259 Ericsson Network Manager: improper neutralization of user controlled input

Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains...

CVE-2025-27259 Ericsson Network Manager: improper neutralization of user controlled input

Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other sites or domains...