CVE-2025-23179

CWE-798: Use of Hard-coded Credentials...

CVE-2025-23178

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...

CVE-2025-23181

CVE-2025-23181 affects Ribbon Communications Apollo 9608 SBC; root cause is an unnecessary privileged operation in v9.6R3, enabling Execution with Unnecessary Privileges. CVSS 3.1 base score 8.0 (HIGH) with Adjacent attack vector, Low attack complexity, Low privileges required, no user interactio...

CVE-2025-23178

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...

CVE-2025-23179

CVE-2025-23179 affects Ribbon Communications Apollo 9608 SBC. The issue is a trust management weakness caused by hard-coded credentials (CWE-798). Severity per the CVSS 3.1 entry is MEDIUM (AV: adjacent, AC: low, PR: low, UI: none, S: unchanged, C:L/I:L/A:L). Reported sources consistently describ...

CVE-2025-23179 Ribbon Communications - CWE-798: Use of Hard-coded Credentials

CWE-798: Use of Hard-coded Credentials...

CVE-2025-23178 Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...

CVE-2025-23177

CVE-2025-23177 affects Ribbon Communications Apollo 9608 SBC. Connected sources identify the issue as CWE-427: Uncontrolled Search Path Element, with specific mentions of Apollo 9608 version v9.6R3 being implicated (PT-2025-18181 and CNNVD-202504-3975 align on this version). The Red Hat/NVD/CVE r...

PT-2025-18188 · Ribbon Communications · Apollo 9608

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to execution with unnecessary privileges, as described by CWE-250. No additional details are provided about the nature of the issue, affected devices, or real-world...

Case Study: Fine-Tuning Small Language Models for Accurate and Private CWE Detection in Python Code

Large Language Models LLMs have demonstrated significant capabilities in understanding and analyzing code for security vulnerabilities, such as Common Weakness Enumerations CWEs. However, their reliance on cloud infrastructure and substantial computational requirements pose challenges for analyzi...

CVE-2025-23176

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

CVE-2025-23175

CVE-2025-23175 relates to a multiple XSS (CWE-79) exposure associated with Tecnick TCExam. Connected sources indicate the vulnerable software is Tecnick TCExam, including version 16.3.2 per CNNVD, with reports in PT-Security citing the Tecnick/Tcexam name. The documents do not provide concrete ex...

CVE-2025-23175 Tecnick - Multiple XSS (CWE-79)

Multiple XSS CWE-79...

CVE-2025-23175 Tecnick - Multiple XSS (CWE-79)

Multiple XSS CWE-79...

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues

Summary Multple vulnerabilities affect IBM Sterling Secure Proxy and are addressed in the latest release and iFix Vulnerability Details CVEID:CVE-2024-30172 DESCRIPTION: The Bouncy Castle Crypto Package For Java is vulnerable to a denial of service, caused by an infinite loop in the Ed25519...

Security Bulletin: Multiple vulnerabilities found in IBM EntireX.

Summary IBM EntireX has been updated in order to address multiple vulnerabilities. Vulnerability Details CVEID:CVE-2024-56812 DESCRIPTION: IBM EntireX could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in...

Security Bulletin: IBM Sterling B2B Integrator is Vulnerable to Information Disclosure (CVE-2024-45089)

Summary IBM Sterling B2B Integrator has addressed the information disclosure vulnerability Vulnerability Details CVEID:CVE-2024-45089 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition EBICS server could allow an authenticated user to obtain sensitive filename information due to an...

Security Bulletin: IBM Sterling B2B Integrator is Vulnerable to Cross-Site Scripting (CVE-2024-47116)

Summary IBM Sterling B2B Integrator has addressed the Cross-Site scripting vulnerability Vulnerability Details CVEID:CVE-2024-47116 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to Log Forging CVE-2024-35150

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to Log Forging CVE-2024-35150. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-35150 DESCRIPTION: IBM Maximo Application Suite - Monitor Component does not...

Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities

Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2023-31346 DESCRIPTION: AMD SEV-SNP Firmware could allow a local authenticated...