NA - CVE-2025-24329 - Sending a crafted SOAP "provision" operation...
Sending a crafted SOAP "provision" operation message archive field within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause path traversal issue in...
NA - CVE-2025-24330 - Sending a crafted SOAP "provision" operation...
Sending a crafted SOAP "provision" operation message PlanId field within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause path traversal issue in...
NA - CVE-2025-24331 - The Single RAN baseband OAM service is intended...
The Single RAN baseband OAM service is intended to run as an unprivileged service. However, it initially starts with root privileges and assigns certain capabilities before dropping to an...
NA - CVE-2025-24332 - Nokia Single RAN AirScale baseband allows an...
Nokia Single RAN AirScale baseband allows an authenticated administrative user access to all physical boards after performing a single login to the baseband system board. The baseband does not...
NA - CVE-2025-24333 - Nokia Single RAN baseband software earlier than...
Nokia Single RAN baseband software earlier than 24R1-SR 1.0 MP contains administrative shell input validation fault, which authenticated admin user can, in theory, potentially use for injecting...
NA - CVE-2025-24334 - The Nokia Single RAN baseband software earlier...
The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST request through the Mobile Network...
NA - CVE-2025-24335 - Nokia Single RAN baseband software versions...
Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP contain a SOAP message input validation flaw, which in theory could potentially be used for causing resource exhaustion in...
NA - CVE-2025-27021 - The misconfiguration in the sudoers...
The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem command line tool....
NA - CVE-2025-27022 - Path traversal in WebGUI HTTP endpoint in...
Path traversal in WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests. Details: Lack or insufficient validation of...
Medium - CVE-2024-13451 - The Contact Form by Bit Form: Multi Step Form,...
The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to Sensitive Information Exposure in...