CVE-2026-37230

FlexRIC v2.0.0 crashes when the near-RT RIC receives a RICINDICATION message with a ranfuncid that does not exist in its registry. The lookup returns NULL, triggering assert in Debug builds SIGABRT or NULL pointer dereference in Release builds SIGSEGV. A remote unauthenticated attacker can crash...

CVE-2026-37231

FlexRIC v2.0.0 uses a uint16t counter for xappid assignment but stores the value in uint32t message fields. After 65,530+ E42SETUPREQUESTs, the 16-bit counter wraps around and produces duplicate xappids. The iApp port 36422 crashes when attempting to register a duplicate ID in its internal data...

PT-2026-45244

Name of the Vulnerable Software and Affected Versions AstrBotDevs AstrBot version 4.24.2 Description An authorization bypass exists that can be triggered remotely. The issue occurs within the astr main agent function located in the astrbot/core/astr main agent.py file, where manipulation of the...

CVE-2026-37230

FlexRIC v2.0.0 is vulnerable to a crash caused by the improper handling of RIC_INDICATION messages. When the near-RT RIC receives a message containing a ran_func_id that is missing from its registry, the lookup returns NULL . This results in an assert() trigger in Debug builds (causing SIGABRT ) ...

CVE-2026-37231

FlexRIC v2.0.0 is vulnerable to a crash in its iApp (port 36422 ) due to an integer wrap-around issue. The software uses a uint16_t counter for xapp_id assignment while storing the value in uint32_t message fields. After receiving over 65,530 E42_SETUP_REQUESTs, the 16-bit counter wraps around, p...

CVE-2026-37221

FlexRIC v2.0.0 is vulnerable to a crash due to improper handling of RIC_SUBSCRIPTION_RESPONSE messages. The near-RT RIC component uses an assert() function to verify the existence of a pending event during response processing; however, it fails to properly validate the ric_id . A remote unauthent...

WezTerm MCP Server: Operating System Command Injection Vulnerability

WezTerm MCP Server is a terminal control and interaction tool developed by Kentaro Hiraishi. Version 0.1.0 of WezTerm MCP Server contains a vulnerability related to operating system command injection. This vulnerability stems from incorrect operations in the switchpane/writetospecificpane...

PT-2026-45378

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.2.2 Description The Event Log detail endpoint "GET /api/v2/eventLogs/event log id" fetches audit-log rows directly by numeric ID after performing only a generic Audit Log permission check. This differs from t...

PT-2026-45445

A weakness has been identified in janet-lang janet up to 1.41.0. This vulnerability affects the function unmarshal one fiber of the file src/core/marsh.c. Executing a manipulation can lead to integer overflow. It is possible to launch the attack on the local host. The exploit has been made...

ASB-A-488896810

Bulletin has no description...

CVE-2026-10198

A flaw has been found in Assimp up to 6.0.4. Affected by this vulnerability is the function Assimp::glTFImporter::ImportMeshes of the file glTFImporter.cpp of the component glTFImporter. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit ha...

CVE-2026-43419

creationtimestamp| type| source ---|---|--- 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-31435

creationtimestamp| type| source ---|---|--- 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-23313

creationtimestamp| type| source ---|---|--- 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-43329

creationtimestamp| type| source ---|---|--- 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601 2026-07-02 06:57:40+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-45505

creationtimestamp| type| source ---|---|--- 2026-05-31 18:08:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn65vavml32u 2026-06-09 11:02:30+00:00| seen| https://bsky.app/profile/cyberowi.pl/post/3mnu2c52rmj2v...

CVE-2026-10189

creationtimestamp| type| source ---|---|--- 2026-05-31 17:54:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn654uzzeu27 2026-05-31 19:06:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mn6b52zenf2j 2026-06-01 07:30:27+00:00| seen|...

CVE-2026-10270

creationtimestamp| type| source ---|---|--- 2026-05-31 14:28:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116669649537496666 2026-06-03 23:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mng7ycwb2v2e...

ECHO-9B16-DC87-042E

Bulletin has no description...

GHSA-X746-7M8F-X49C

creationtimestamp| type| source ---|---|--- 2026-05-31 03:41:45+00:00| seen| https://gist.github.com/ftnext/833b2536b55601402ace7b2a4b8cd024 2026-05-31 03:42:36+00:00| seen| https://gist.github.com/ftnext/f3a40adeae641644a9cbad660d0234cb...