CVE-2024-53827

Ericsson Packet Core Controller (PCC) is affected by an improper input validation vulnerability where an attacker sending a high volume of specially crafted messages can cause service degradation. Public sources indicate PCC prior to version 1.36 is impacted (CNNVD entry). The CVE description not...

Airiana code issue vulnerabilities

Airiana is a SystemAir Modbus ventilation controller by Daniel Halling, a personal developer. A code issue vulnerability exists in Airiana version 11.0 and earlier, which stems from improper handling of the file coef and could lead to a deserialization attack...

CVE-2024-53827: Improper Input Validation

Ericsson Packet Core Controller PCC contains a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation...

PT-2025-21620 · Ericsson · Ericsson Packet Core Controller

Name of the Vulnerable Software and Affected Versions: Ericsson Packet Core Controller PCC affected versions not specified Description: The issue concerns a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation. Recommendations: At the...

Ericsson Packet Core Controller Input Validation Vulnerability

Ericsson Packet Core Controller Ericsson PCC is a packet core controller from Ericsson, Sweden. A security vulnerability exists in Ericsson Packet Core Controller versions prior to 1.36, which stems from the fact that an attacker sending a large number of specially crafted messages could result i...

Atheos security vulnerabilities

Atheos is an open source browser-based self-hosted cloud IDE from Atheos. A security vulnerability exists in Atheos versions prior to v602, which stems from the $target parameter in /controller.php not being properly validated, which could lead to the execution of arbitrary files via path travers...

Cisco IOS XE Wireless Controller Arbitrary File Upload (cisco-sa-wlc-file-uplpd-rHZG9UfC)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Out-of-Band Access Point AP Image Download feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to upload arbitrary...

CVE-2025-29686

A cross-site scripting XSS vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter at /inform/InformManageController.java...

CVE-2025-29689

A cross-site scripting XSS vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the password parameter at /mail/MailController.java...

CVE-2025-29690

A cross-site scripting XSS vulnerability in OA System before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the outtype parameter at /address/AddrController.java...

Cisco IOS XE Wireless Controller Software Access Control Error Vulnerability

Cisco IOS XE Wireless Controller software is a wireless LAN controller from Cisco. The Cisco IOS XE Wireless Controller Software suffers from an Access Control Error vulnerability that stems from insufficient access control and can be exploited by an attacker to cause the deletion of arbitrary us...

PT-2025-21165 · Invision · Invision Community

Name of the Vulnerable Software and Affected Versions: Invision Community versions 5.0.0 through 5.0.7 Description: The issue lies within the themeeditor controller, where a protected method named customCss can be invoked by unauthenticated users. This method passes the value of the content...

oa_system cross-site scripting vulnerabilities

oasystem is a hailey individual developer's application for the day-to-day operation and management of organizations, used by employees and managers. A security vulnerability exists in oasystem versions prior to v2025.01.01, which stems from improperly cleaned input of the parameter password in t...

oa_system cross-site scripting vulnerabilities

oasystem is a hailey individual developer's application for the daily operation and management of organizations, used by employees and managers. A security vulnerability exists in oasystem versions prior to v2025.01.01, which stems from improperly cleaned inputs for the parameter title in the fil...

CVE-2025-20100

Improper access control in the memory controller configurations for some IntelR XeonR 6 processor with E-cores may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20100

Improper access control in the memory controller configurations for some IntelR XeonR 6 processor with E-cores may allow a privileged user to potentially enable escalation of privilege via local access...

kernel: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()

A NULL pointer dereference was found in the Linux kernel in case of DT error in kspciesetuprcappregs. This may lead to a crash...

kernel: pmdomain: imx93-blk-ctrl: correct remove path

A flaw was found in the Linux kernel's i.MX93 power domain driver. An improper loop condition in the device removal routine prevents the loop from terminating. A local attacker could exploit this flaw during device unbinding or removal to trigger a kernel panic, resulting in a Denial of Service D...

kernel: usb: dwc3: core: Prevent USB core invalid event buffer address access

A flaw was found in the Linux kernel's USB dwc3 core. During runtime suspend, the USB core could attempt to access an invalid event buffer address. This issue, particularly affecting Exynos platforms, can lead to System Memory Management Unit SMMU faults and other memory-related problems,...

kernel: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails

A flaw was found in the hwmon hardware monitoring subsystem of the Linux kernel, specifically within the ibmpex driver. This vulnerability is a Use-After-Free UAF error, which occurs when the system attempts to use memory that has already been released. An attacker with administrative privileges...