ERIC

Latest CVEs · RSS

• CVE-2026-58107 2026-08-28 · CVSS 5.5
  CodeChecker's massStoreRun processing path performs one-shot decompression of attacker-controlled, Base64-encoded zlib data without enforcing a maximum decompre
• CVE-2026-58106 2026-08-28 · CVSS 2.0
  CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r  was fixed by replacing unchecked strcpy() with a bounded safe_strcpy() helper. At ldlogger-too
• CVE-2026-58108 2026-08-26 · CVSS 1.2
  The personal access token removal query selects from PersonalAccessTokenDB but filters on columns of Session, with no join between them. SQLAlchemy resolves tha
• CVE-2025-59181 2026-07-27 · CVSS 4.8
  Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacke
• CVE-2025-59180 2026-07-27 · CVSS 5.1
  Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cl
• CVE-2025-59178 2026-07-27 · CVSS 4.8
  Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allow
• CVE-2025-59177 2026-07-27 · CVSS 6.8
  Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically c
• CVE-2025-59172 2026-07-27 · CVSS 8.5
  Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execut
• CVE-2025-59174 2026-06-05 · CVSS 7.1
  Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may
• CVE-2026-25659 2026-06-05 · CVSS 7.1
  Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an attacker continuously
• CVE-2026-25658 2026-06-05 · CVSS 7.1
  Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Missing Values (CWE-230) vulnerability where an attacker continuously
• CVE-2026-25657 2026-06-05 · CVSS 7.1
  Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of Syntactically Invalid Structure (CWE-228) vulnerability where an attac
• CVE-2026-25660 2026-04-24 · CVSS 9.3
  CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the UR
• CVE-2024-53828 2026-04-01 · CVSS 5.3
  Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a vulnerability where an attacker sending a large volume of specially crafted messages may
• CVE-2025-40842 2026-03-25 · CVSS 8.5
  Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclos
• CVE-2025-40841 2026-03-25 · CVSS 5.1
  Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Request Forgery (CSRF) vulnerability which, if exploited, can lead to unauthorized
• CVE-2025-27260 2026-03-25 · CVSS 7.2
  Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains an Improper Filtering of Special Elements vulnerability which, if exploited, can lead to unautho
• CVE-2025-40843 2025-10-28 · CVSS 5.9
  CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. CodeChecker versions up to 6.26.1 co
• CVE-2025-0636 2025-10-13 · CVSS 8.4
  EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited leading to Arbitrary Cod
• CVE-2025-27258 2025-10-13 · CVSS 6.9
  Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege.
• CVE-2025-27259 2025-10-13 · CVSS 2.4
  Ericsson Network Manager versions prior to ENM 25.2 GA contain a vulnerability that, if exploited, can exfiltrate limited data or redirect victims to other site
• CVE-2025-40838 2025-09-25 · CVSS 5.1
  Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if exploited can lead to unauthorized discl
• CVE-2025-40837 2025-09-25 · CVSS 8.7
  Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges t
• CVE-2025-40836 2025-09-25 · CVSS 8.7
  Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated pri
• CVE-2025-27262 2025-09-25 · CVSS 8.5
  Ericsson Indoor Connect 8855 contains a command injection vulnerability which if exploited can result in an escalation of privileges.