airbus

Latest CVEs · RSS

• CVE-2026-88817 2026-09-16 · CVSS 8.7
  An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitation
• CVE-2026-14466 2026-09-04 · CVSS 4.3
  It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions
• CVE-2026-8482 2026-07-02 · CVSS 4.3
  A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a po
• CVE-2026-8480 2026-07-01 · CVSS 4.3
  A vulnerability was discovered on Stormshield Network Security 4.3.0  to 4.3.41 (included), 4.4.0 to 4.8.15 (included) , 5.0.2 EA to 5.0.5 (included) A revok
• CVE-2026-10538 2026-07-01 · CVSS 8.9
  Messaging consumer functionality allows deserialization of user-controlled data without sufficient restriction of allowed object types in the out of support Con
• CVE-2026-10539 2026-07-01 · CVSS 9.5
  A Control-M/Server communication command does not sufficiently filter or sanitize user-supplied input. Under certain conditions, this issue may allow an unauthe
• CVE-2026-10540 2026-07-01 · CVSS 5.6
  The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credent
• CVE-2026-8474 2026-06-01 · CVSS 5.3
  A vulnerability was discovered on Stormshield Network Security  * 4.3.0 to 4.3.41,  * 4.8.0 to 4.8.15,  * 5.0.0 to 5.0.5 It is possible to
• CVE-2025-7024 2026-04-03 · CVSS 5.6
  Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse. An attacker may execute arbit
• CVE-2025-55108 2025-11-05 · CVSS 9.5
  The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions when mutual SSL/TLS a
• CVE-2025-55118 2025-09-16 · CVSS 8.4
  Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured. The issue occurs in the following cases: * C
• CVE-2025-55117 2025-09-16 · CVSS 6.3
  A stack-based buffer overflow can be remotely triggered when formatting an error message in the Control-M/Agent when SSL/TLS communication is configured. The
• CVE-2025-55116 2025-09-16 · CVSS 9.3
  A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerabili
• CVE-2025-55115 2025-09-16 · CVSS 9.3
  A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability
• CVE-2025-55114 2025-09-16 · CVSS 6.9
  The improper order of AUTHORIZED_CTM_IP validation in the Control-M/Agent, where the Control-M/Server IP address is validated only after the SSL/TLS handshake i
• CVE-2025-55113 2025-09-16 · CVSS 9.5
  If the Access Control List is enforced by the Control-M/Agent and the C router is in use (default in Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 an
• CVE-2025-55112 2025-09-16 · CVSS 7.6
  Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are configured to use the non-default Blowfish cryp
• CVE-2025-55111 2025-09-16 · CVSS 5.7
  Certain files with overly permissive permissions were identified in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsuppo
• CVE-2025-55110 2025-09-16 · CVSS 5.7
  Control-M/Agents use a kdb or PKCS#12 keystore by default, and the default keystore password is well known and documented. An attacker with read access to the
• CVE-2025-55109 2025-09-16 · CVSS 9.5
  An authentication bypass vulnerability exists in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions when
• CVE-2019-10881 2021-04-13 · CVSS 9.4
  Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with
• CVE-2019-18567 2020-02-03 · CVSS 6.1
  Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of servic
• CVE-2019-18568 2019-12-31 · CVSS 8.1
  Avira Free Antivirus 15.0.1907.1514 is prone to a local privilege escalation through the execution of kernel code from a restricted user.
• CVE-2019-12091 2019-09-26 · CVSS 7.8
  The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The
• CVE-2019-10882 2019-09-26 · CVSS 5.5
  The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The