Lucene search
K

42 matches found

Vulnrichment
Vulnrichment
added 2025/10/13 6:26 a.m.2 views

CVE-2025-0636 Arbitrary Code Execution vulnerability in Ericsson RAN Compute and Site Controller

EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Code Execution...

8.4CVSS6.7AI score0.00035EPSS
Exploits0References1
CVE
CVE
added 2025/10/13 6:26 a.m.11 views

CVE-2025-0636

CVE-2025-0636 affects Ericsson RAN Compute and Ericsson Site Controller (EMCLI). The issue is a high-severity vulnerability arising from improper neutralization of special elements used in an OS command, potentially enabling Arbitrary Code Execution. The publicly documented details across multipl...

8.4CVSS6.7AI score0.00035EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.1 views

Ericsson RAN Compute和Ericsson Site Controller 6610 安全漏洞

Ericsson RAN Compute and Ericsson Site Controller 6610 are both products of Ericsson, a Swedish company.Ericsson RAN Compute is a cloud-native software solution for handling computing functions in a RAN.Ericsson Site Controller 6610 is an intelligent power management controller for site...

8.4CVSS6.9AI score0.00035EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-27856

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00107EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-27860

Malicious code in bioql PyPI...

8.4CVSS8.2AI score0.00033EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/07/17 10:14 p.m.9 views

CVE-2025-7763 thinkgem JeeSite Site Controller SiteController.java select redirect

A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0. Affected is the function select of the file src/main/java/com/jeesite/modules/cms/web/SiteController.java of the component Site Controller. The manipulation of the argument redirect leads to open...

5.3CVSS0.00367EPSS
Exploits1References6
CVE
CVE
added 2025/07/17 10:14 p.m.14 views

CVE-2025-7763

CVE-2025-7763 affects thinkgem JeeSite up to version 5.12.0. The vulnerability lies in the Site Controller’s SiteController.java, where manipulation of the redirect argument in the select function causes an open redirect. Exploitation can be performed remotely, and public disclosure of the exploi...

5.3CVSS4.7AI score0.00367EPSS
Exploits1References6Affected Software1
CNNVD
CNNVD
added 2025/07/17 12:0 a.m.2 views

Thinkgem JeeSite 输入验证错误漏洞

Thinkgem JeeSite is an open source Java EE enterprise-class rapid development platform of China Zhuo Yuan Thinkgem company . The platform includes system permissions components , data permissions components , data dictionary components , core tools components , view manipulation components ,...

5.3CVSS4.9AI score0.00367EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2025/07/17 12:0 a.m.2 views

PT-2025-29981

Name of the Vulnerable Software and Affected Versions thinkgem JeeSite versions up to 5.12.0 Description A problematic vulnerability exists in thinkgem JeeSite. The select function within the src/main/java/com/jeesite/modules/cms/web/SiteController.java file of the Site Controller component is...

5.3CVSS4AI score0.00367EPSS
Exploits1References19
RedhatCVE
RedhatCVE
added 2025/05/23 3:19 a.m.1 views

CVE-2023-23774

Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's serial port in case of an unhandled exception. This allows an attacker with physical access that is able to trigger such an exception to extrac...

8.4CVSS7.5AI score0.00033EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:19 a.m.4 views

CVE-2023-23772

Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a...

8.8CVSS7.4AI score0.00038EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:19 a.m.4 views

CVE-2023-23770

Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interface MMI, allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled...

9.8CVSS7AI score0.00107EPSS
Exploits0References1
NVD
NVD
added 2025/05/22 11:15 a.m.10 views

CVE-2024-25010

Ericsson RAN Compute and Site Controller 6610 contains in certain configurations a high severity vulnerability where improper input validation could be exploited leading to arbitrary code execution...

8.8CVSS0.00135EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/22 10:14 a.m.13 views

CVE-2024-25010 Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability

Ericsson RAN Compute and Site Controller 6610 contains in certain configurations a high severity vulnerability where improper input validation could be exploited leading to arbitrary code execution...

8.8CVSS0.00135EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/22 12:0 a.m.4 views

PT-2025-22453 · Ericsson · Ericsson Ran Compute/Site Controller 6610

Name of the Vulnerable Software and Affected Versions: Ericsson RAN Compute and Site Controller 6610 affected versions not specified Description: The issue is related to improper input validation, which could be exploited, leading to arbitrary code execution. Recommendations: At the moment, there...

8.8CVSS6.8AI score0.00135EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/05/22 12:0 a.m.2 views

Ericsson RAN Compute and Site Controller 6610 安全漏洞

Ericsson RAN Compute and Site Controller 6610 is a computer and site controller from Ericsson Sweden. A security vulnerability exists in the Ericsson RAN Compute and Site Controller 6610 that stems from insufficient input validation and could lead to arbitrary code execution...

8.8CVSS7.4AI score0.00135EPSS
Exploits0References1
NVD
NVD
added 2024/08/16 10:15 a.m.8 views

CVE-2024-25008

Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for examp...

6.8CVSS0.0005EPSS
Exploits0References1
CVE
CVE
added 2024/08/16 9:42 a.m.53 views

CVE-2024-25008

Ericsson RAN Compute and Site Controller 6610 is affected by an Improper Input Validation vulnerability that can lead to arbitrary code execution, including obtaining a Linux shell with attacker privileges. The issue affects Ericsson RAN Compute and Site Controller 6610 software, with exploitatio...

6.8CVSS6.8AI score0.0005EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/08/16 12:0 a.m.2 views

PT-2024-20697 · Ericsson · Ericsson Ran Compute/Site Controller 6610

Name of the Vulnerable Software and Affected Versions: Ericsson RAN Compute and Site Controller 6610 versions prior to 24.Q2 Description: The issue is related to improper input validation in the Control System, which can lead to arbitrary code execution. For example, it can be used to obtain a...

6.8CVSS7.7AI score0.0005EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/08/16 12:0 a.m.0 views

Ericsson RAN Compute and Site Controller 6610 安全漏洞

Ericsson RAN Compute and Site Controller 6610 is a computer and site controller from Ericsson Sweden. A security vulnerability exists in the Ericsson RAN Compute and Site Controller 6610 that originates from incorrect input validation and could lead to arbitrary code execution...

6.8CVSS7.4AI score0.0005EPSS
Exploits0References2
Rows per page
Query Builder