PT-2026-45513

FlexRIC v2.0.0 trusts the xapp id field from E42 message payloads without binding it to the sender's SCTP association. The validation function valid xapp id only checks that the value is within the assigned range. A remote unauthenticated attacker can impersonate any xApp by specifying their xapp...

PT-2026-45406

A security flaw has been discovered in itsourcecode Content Management System 1.0. This issue affects some unknown processing of the file /admin/update ss img.php. The manipulation of the argument topic id results in sql injection. The attack can be executed remotely. The exploit has been release...

CVE-2026-10198

A flaw has been found in Assimp up to 6.0.4. Affected by this vulnerability is the function Assimp::glTFImporter::ImportMeshes of the file glTFImporter.cpp of the component glTFImporter. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit ha...

CVE-2026-23313

creationtimestamp| type| source ---|---|--- 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-31435

creationtimestamp| type| source ---|---|--- 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-43419

creationtimestamp| type| source ---|---|--- 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-43329

creationtimestamp| type| source ---|---|--- 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601 2026-07-02 06:57:40+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-45505

creationtimestamp| type| source ---|---|--- 2026-05-31 18:08:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn65vavml32u 2026-06-09 11:02:30+00:00| seen| https://bsky.app/profile/cyberowi.pl/post/3mnu2c52rmj2v...

CVE-2026-10189

creationtimestamp| type| source ---|---|--- 2026-05-31 17:54:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn654uzzeu27 2026-05-31 19:06:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mn6b52zenf2j 2026-06-01 07:30:27+00:00| seen|...

CVE-2026-10270

creationtimestamp| type| source ---|---|--- 2026-05-31 14:28:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116669649537496666 2026-06-03 23:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mng7ycwb2v2e...

ECHO-9B16-DC87-042E

Bulletin has no description...

GHSA-X746-7M8F-X49C

creationtimestamp| type| source ---|---|--- 2026-05-31 03:41:45+00:00| seen| https://gist.github.com/ftnext/833b2536b55601402ace7b2a4b8cd024 2026-05-31 03:42:36+00:00| seen| https://gist.github.com/ftnext/f3a40adeae641644a9cbad660d0234cb...

CVE-2026-10157

A vulnerability was identified in Open5GS up to 2.7.6. This impacts an unknown function of the file src/amf/ngap-handler.c of the component NGAP PathSwitchRequest Message Handler. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit is...

CVE-2026-10155

creationtimestamp| type| source ---|---|--- 2026-05-31 01:14:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn4fb2pxi327...

CVE-2026-10154

A vulnerability has been found in Dolibarr ERP CRM 23.0.0/23.0.1/23.0.2. The affected element is an unknown function of the file htdocs/user/messaging.php. Such manipulation of the argument ID leads to authorization bypass. The attack can be executed remotely. Upgrading to version 23.0.3 is...

CVE-2026-10154: Authorization Bypass Through User-Controlled Key

A vulnerability has been found in Dolibarr ERP CRM 23.0.0/23.0.1/23.0.2. The affected element is an unknown function of the file htdocs/user/messaging.php. Such manipulation of the argument ID leads to authorization bypass. The attack can be executed remotely. Upgrading to version 23.0.3 is...

Code-Projects Online Music Site SQL Injection Vulnerability

Code-Projects Online Music Site is an online music website developed by Code-Projects as open source. Version 1.0 of Code-Projects Online Music Site has a SQL injection vulnerability. This vulnerability arises from the parameter ID operations in the file/Administrator/PHP/AdminEditAlbum.php,...

SourceCodester Hospitals Patient Records Management System SQL Injection Vulnerability

SourceCodester Hospitals Patient Records Management System is an open-source hospital medical record management system developed by SourceCodester. Version 1.0 of the SourceCodester Hospitals Patient Records Management System has a SQL injection vulnerability. This vulnerability arises from the...

CVE-2026-10178: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file /Administrator/PHP/AdminEditAlbum.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may ...

CVE-2026-10184: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This impacts an unknown function of the file /classes/Users.php?f=delete. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been...