https://vulnogram.org/ Most recent CVEs assigned by Airbus (airbus). https://vulnogram.org/seaview/icons/airbus.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-111088 https://vulnogram.org/CVE-2026-111088 A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen. Medium Tue, 20 Oct 2026 18:45:33 GMT https://vulnogram.org/CVE-2026-113810 https://vulnogram.org/CVE-2026-113810 A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting certificate creation for user. The stored XSS can only be triggered during validation by the adm… High Tue, 20 Oct 2026 18:31:35 GMT https://vulnogram.org/CVE-2026-113808 https://vulnogram.org/CVE-2026-113808 A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator. High Tue, 20 Oct 2026 18:15:43 GMT https://vulnogram.org/CVE-2026-113469 https://vulnogram.org/CVE-2026-113469 A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine. High Tue, 20 Oct 2026 08:29:49 GMT https://vulnogram.org/CVE-2026-113465 https://vulnogram.org/CVE-2026-113465 It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter a… Medium Tue, 20 Oct 2026 08:09:33 GMT https://vulnogram.org/CVE-2026-111090 https://vulnogram.org/CVE-2026-111090 A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verificatio… High Tue, 20 Oct 2026 07:42:53 GMT https://vulnogram.org/CVE-2026-88817 https://vulnogram.org/CVE-2026-88817 An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitation or approval. It did not grant application-wide administrator privileges, and the vulnerab… High Wed, 16 Sep 2026 12:10:36 GMT https://vulnogram.org/CVE-2026-14466 https://vulnogram.org/CVE-2026-14466 It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some malicious script in a group’s comments in the webservices administration int… Medium Fri, 04 Sep 2026 14:27:58 GMT https://vulnogram.org/CVE-2026-8482 https://vulnogram.org/CVE-2026-8482 A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a possible leak of secret information if administration commands have been passed with the CLI… Medium Thu, 02 Jul 2026 08:42:56 GMT https://vulnogram.org/CVE-2026-8480 https://vulnogram.org/CVE-2026-8480 A vulnerability was discovered on Stormshield Network Security 4.3.0 to 4.3.41 (included), 4.4.0 to 4.8.15 (included) , 5.0.2 EA to 5.0.5 (included) A revoked client certificate can still be used to authenticate to the captive‑admin portal, allowing… Medium Wed, 01 Jul 2026 14:52:12 GMT https://vulnogram.org/CVE-2026-10538 https://vulnogram.org/CVE-2026-10538 Messaging consumer functionality allows deserialization of user-controlled data without sufficient restriction of allowed object types in the out of support Control-M/Server and Control-M/Enterprise Manager versions 9.0.20.x and potentially earlier.… High Wed, 01 Jul 2026 07:56:31 GMT https://vulnogram.org/CVE-2026-10539 https://vulnogram.org/CVE-2026-10539 A Control-M/Server communication command does not sufficiently filter or sanitize user-supplied input. Under certain conditions, this issue may allow an unauthenticated attacker to execute unauthorized commands on the affected server, potentially lea… Critical Network Exploitable Wed, 01 Jul 2026 07:55:00 GMT https://vulnogram.org/CVE-2026-10540 https://vulnogram.org/CVE-2026-10540 The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker. This vulnerability affects Control-M/Enterprise Manag… Medium Wed, 01 Jul 2026 07:52:10 GMT https://vulnogram.org/CVE-2026-8474 https://vulnogram.org/CVE-2026-8474 A vulnerability was discovered on Stormshield Network Security * 4.3.0 to 4.3.41, * 4.8.0 to 4.8.15, * 5.0.0 to 5.0.5 It is possible to execute a reflected XSS attack on the login API available on Stormshield SNS appliance by executing a script on th… Medium Network Exploitable Mon, 01 Jun 2026 07:47:54 GMT https://vulnogram.org/CVE-2025-7024 https://vulnogram.org/CVE-2025-7024 Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse. An attacker may execute arbitrary code with SYSTEM privileges if a user is tricked or directed to place a crafted file in… High Fri, 03 Apr 2026 07:30:10 GMT https://vulnogram.org/CVE-2025-55108 https://vulnogram.org/CVE-2025-55108 The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions when mutual SSL/TLS authentication is not enabled (i.e. in the default configuration). NOTE: * The vendor belie… Critical Network Exploitable Wed, 05 Nov 2025 09:07:29 GMT https://vulnogram.org/CVE-2025-55118 https://vulnogram.org/CVE-2025-55118 Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured. The issue occurs in the following cases: * Control-M/Agent 9.0.20: SSL/TLS configuration is set to the non-default setting "use_openssl=n";… High Network Exploitable Tue, 16 Sep 2025 12:23:39 GMT https://vulnogram.org/CVE-2025-55117 https://vulnogram.org/CVE-2025-55117 A stack-based buffer overflow can be remotely triggered when formatting an error message in the Control-M/Agent when SSL/TLS communication is configured. The issue occurs in the following cases: * Control-M/Agent 9.0.20: SSL/TLS configuration is set… Medium Network Exploitable Tue, 16 Sep 2025 12:22:58 GMT https://vulnogram.org/CVE-2025-55116 https://vulnogram.org/CVE-2025-55116 A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially ear… Critical Tue, 16 Sep 2025 12:22:23 GMT https://vulnogram.org/CVE-2025-55115 https://vulnogram.org/CVE-2025-55115 A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earl… Critical Tue, 16 Sep 2025 12:21:51 GMT https://vulnogram.org/CVE-2025-55114 https://vulnogram.org/CVE-2025-55114 The improper order of AUTHORIZED_CTM_IP validation in the Control-M/Agent, where the Control-M/Server IP address is validated only after the SSL/TLS handshake is completed, exposes the Control-M/Agent to vulnerabilities in the SSL/TLS implementation… Medium Network Exploitable Tue, 16 Sep 2025 12:20:30 GMT https://vulnogram.org/CVE-2025-55113 https://vulnogram.org/CVE-2025-55113 If the Access Control List is enforced by the Control-M/Agent and the C router is in use (default in Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions; non-default but configurable using the JAVA_AR… Critical Network Exploitable Tue, 16 Sep 2025 12:20:03 GMT https://vulnogram.org/CVE-2025-55112 https://vulnogram.org/CVE-2025-55112 Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are configured to use the non-default Blowfish cryptography algorithm use a hardcoded key. An attacker with access to network traffic and to… High Network Exploitable Tue, 16 Sep 2025 12:19:24 GMT https://vulnogram.org/CVE-2025-55111 https://vulnogram.org/CVE-2025-55111 Certain files with overly permissive permissions were identified in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions as well as in newer versions which were upgraded from an affected version. T… Medium Tue, 16 Sep 2025 12:18:22 GMT https://vulnogram.org/CVE-2025-55110 https://vulnogram.org/CVE-2025-55110 Control-M/Agents use a kdb or PKCS#12 keystore by default, and the default keystore password is well known and documented. An attacker with read access to the keystore could access sensitive data using this password. Medium Tue, 16 Sep 2025 12:16:57 GMT https://vulnogram.org/CVE-2025-55109 https://vulnogram.org/CVE-2025-55109 An authentication bypass vulnerability exists in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions when using an empty or default kdb keystore or a default PKCS#12 keystore. A remote attacker wi… Critical Network Exploitable Tue, 16 Sep 2025 12:14:36 GMT https://vulnogram.org/CVE-2019-10881 https://vulnogram.org/CVE-2019-10881 Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which canno… Critical Network Exploitable Tue, 13 Apr 2021 20:58:01 GMT https://vulnogram.org/CVE-2019-18567 https://vulnogram.org/CVE-2019-18567 Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service. Medium Mon, 03 Feb 2020 17:55:36 GMT https://vulnogram.org/CVE-2019-18568 https://vulnogram.org/CVE-2019-18568 Avira Free Antivirus 15.0.1907.1514 is prone to a local privilege escalation through the execution of kernel code from a restricted user. High Tue, 31 Dec 2019 19:28:32 GMT https://vulnogram.org/CVE-2019-12091 https://vulnogram.org/CVE-2019-12091 The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from command injection vulnerability.… High Thu, 26 Sep 2019 15:18:00 GMT https://vulnogram.org/CVE-2019-10882 https://vulnogram.org/CVE-2019-10882 The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from a stack based buffer overflow in… Medium Thu, 26 Sep 2019 15:16:09 GMT https://vulnogram.org/CVE-2019-10880 https://vulnogram.org/CVE-2019-10880 Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS Command Injection vulnerability in the HTTP interface). Depending upon configuration authent… Critical Network Exploitable Fri, 12 Apr 2019 17:37:54 GMT