32093 matches found
CVE-2026-59315 Spring Cloud Config Monitor Denial of Service
The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier...
GHSA-39MM-RWM3-29JP silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
Impact The advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported by Steve Boyd Silverstripe Ltd...
CVE-2026-30069
A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted payload...
silverstripe/userforms vulnerable to remote code execution via userforms email subject
Impact The userform email subject field in the CMS is vulnerable to a specially crafted payload being used to run arbitrary code on the server. Reported by Jack Wallace from Bastion Security...
Security Bulletin: Multiple vulnerabilities in IBM MQ Agent images
Summary Multiple vulnerabilities were addressed in IBM MQ Agent images Vulnerability Details CVEID:CVE-2026-62995 DESCRIPTION: joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWT...
CVE-2026-81693 openssl_encrypt before 1.4.9 Denial of Service via QR total field
opensslencrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR images with extremely large total values to trigger unbounded memory allocation and cause denial of service through out-of-memory conditions...
CVE-2026-81693
openssl_encrypt before 1.4.9 is vulnerable to a denial-of-service condition caused by insufficient validation of the total field in QR JSON payloads. An attacker can supply a crafted QR image with an extremely large total value, triggering unbounded memory allocation that leads to an out-of-memor...
CVE-2026-81693 openssl_encrypt before 1.4.9 Denial of Service via QR total field
opensslencrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR images with extremely large total values to trigger unbounded memory allocation and cause denial of service through out-of-memory conditions...
CVE-2026-46439
A flaw was found in compliance-trestle. This Server-Side Template Injection SSTI vulnerability exists in the trestle author jinja command, which recursively evaluates rendered templates. An attacker can inject malicious payloads into data fields, such as SSP documents or Lookup Tables, to achieve...
CVE-2026-80547
A flaw was found in the Linux kernel's s390/vfioccw component. This vulnerability arises from the lack of a proper lock to manage the list of Channel Report Word CRW payloads, which are asynchronous events from hardware. Without this lock, these payloads may not be read cohesively, potentially...
SUSE CVE-2026-80525
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipcconfigdata buffer for copier widgets is built once during ipcprepare called from sofpcmsetupconnectedwidgets and cached for reuse. For host copiers...
EUVD-2026-67117
A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted payload...
PT-2026-82533
Name of the Vulnerable Software and Affected Versions free5gc version 4.0.1 Description A NULL pointer dereference occurs in the UDMC registration handler component. This issue allows attackers to trigger a Denial of Service DoS by providing a specially crafted payload. A NULL pointer dereference...
EUVD-2026-67120
A NULL pointer dereference in the CDR processing path of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted payload...
CVE-2026-30069
A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted payload...
PT-2026-82536
Name of the Vulnerable Software and Affected Versions free5gc version 4.0.1 Description A NULL pointer dereference occurs in the CDR processing path, which allows attackers to cause a Denial of Service DoS by supplying a crafted payload. A NULL pointer dereference is a condition where a program...
CVE-2026-30069
A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted payload...
CVE-2026-30069
The free5gc v4.0.1 software is affected by a NULL pointer dereference vulnerability within the UDMC registration handler component. An attacker can exploit this by supplying a crafted payload to cause a Denial of Service (DoS) . No specific remediation steps, exploit links, or MITRE ATT&CK IDs ar...
PT-2026-82594
Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The software fails to validate the total field within QR JSON payloads before materializing ranges. An attacker can provide specially crafted QR images containing extremely large values in th...