ABB Cylon FLXeon 9.3.5 (capture.js) Authenticated File Disclosure/Delete

Summary BACnet® Smart Building Controllers. ABB's BACnet portfolio features a series of BACnet® IP and BACnet MS/TP field controllers for ASPECT® and INTEGRA™ building management solutions. ABB BACnet controllers are designed for intelligent control of HVAC equipment such as central plant, boiler...

ABB Cylon FLXeon 9.3.5 (bbmdList.js) Authenticated Config Poisoning

Summary BACnet® Smart Building Controllers. ABB's BACnet portfolio features a series of BACnet® IP and BACnet MS/TP field controllers for ASPECT® and INTEGRA™ building management solutions. ABB BACnet controllers are designed for intelligent control of HVAC equipment such as central plant, boiler...

The vulnerability of the Microprogrammed Servo Device Software of Kinetix 5700 A, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the Kinetix 5700 A servo-controller’s microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2024-53827

Ericsson Packet Core Controller PCC contains a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation...

The vulnerability in the web interface of the Cisco Application Policy Infrastructure Controller allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the Cisco Application Policy Infrastructure Controller web interface relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Cisco Application Policy Infrastructure Controller, related to synchronization errors when using shared resources, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Application Policy Infrastructure Controller, a component of the information infrastructure management tool, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Command Line Interface (CLI) of the Cisco Application Policy Infrastructure Controller, which allows a attacker to disclose protected information

The vulnerability of the Command Line Interface CLI of the Cisco Application Policy Infrastructure Controller management tool is related to improper cross-border deletion of critical data. Exploiting this vulnerability can allow an attacker to disclose protected information...

USN-7517-1 linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...

USN-7516-2 linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...

USN-7516-1 linux, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...

USN-7512-1 linux-gcp-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Network block device...

USN-7510-1 linux, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Network block device...

CVE-2024-53827

Ericsson Packet Core Controller PCC contains a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation...

CVE-2024-53827 Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability

Ericsson Packet Core Controller PCC contains a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation...

CVE-2024-53827 Ericsson Packet Core Controller (PCC) - Improper Input Validation Vulnerability

Ericsson Packet Core Controller PCC contains a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation...

CVE-2024-53827

Ericsson Packet Core Controller (PCC) is affected by an improper input validation vulnerability where an attacker sending a high volume of specially crafted messages can cause service degradation. Public sources indicate PCC prior to version 1.36 is impacted (CNNVD entry). The CVE description not...

Airiana 代码问题漏洞

Airiana is a SystemAir Modbus ventilation controller by Daniel Halling, a personal developer. A code issue vulnerability exists in Airiana version 11.0 and earlier, which stems from improper handling of the file coef and could lead to a deserialization attack...

PT-2025-21620 · Ericsson · Ericsson Packet Core Controller

Name of the Vulnerable Software and Affected Versions: Ericsson Packet Core Controller PCC affected versions not specified Description: The issue concerns a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation. Recommendations: At the...

Ericsson Packet Core Controller 输入验证错误漏洞

Ericsson Packet Core Controller Ericsson PCC is a packet core controller from Ericsson, Sweden. A security vulnerability exists in Ericsson Packet Core Controller versions prior to 1.36, which stems from the fact that an attacker sending a large number of specially crafted messages could result i...

Atheos 安全漏洞

Atheos is an open source browser-based self-hosted cloud IDE from Atheos. A security vulnerability exists in Atheos versions prior to v602, which stems from the $target parameter in /controller.php not being properly validated, which could lead to the execution of arbitrary files via path travers...