CVE-2026-1973 Free5GC SMF establishPfcpSession null pointer dereference

A vulnerability was determined in Free5GC up to 4.1.0. The impacted element is the function establishPfcpSession of the component SMF. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. I...

ECHO-0B23-1973-4AD6 Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

Amazon Linux AMI : kernel (ALAS-2025-1973)

The version of kernel installed on the remote host is prior to 4.14.355-196.639. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1973 advisory. A use-after-free flaw was found in btrfssearchslot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allow...

CVE-2025-1973

The Export and Import Users and Customers plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.6.2 via the downloadfile function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrar...

CVE-2025-1973 Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function

The Export and Import Users and Customers plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.6.2 via the downloadfile function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrar...

CVE-2025-1973 Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function

The Export and Import Users and Customers plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.6.2 via the downloadfile function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrar...

OESA-2024-2419 undertow security update

Java web server using non-blocking IO Security Fixes: A flaw was found in Undertow package. Using the FormAuthenticationMechanism, a malicious user could trigger a Denial of Service by sending crafted requests, leading the server to an OutofMemory error, exhausting the server's memory.CVE-2023-19...

com.adobe.api.platform:launchpad (>=1.1.11, <=1.3.7), com.adobe.api.platform:launchpad-test-support (>=1.1.11, <=1.3.7) +21 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.1.0.final)

io.undertow:undertow-core MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.adobe.api.platform:launchpad =1.1.11, =1.1.11, =0.9.0.final, =0.9.0.final, =0.9.0.final,...

io.undertow:undertow-servlet (1.1.0.cr3), io.undertow:undertow-websockets-jsr (1.1.0.cr3) potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.1.0.cr3)

io.undertow:undertow-core MAVEN version 1.1.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr3 - io.undertow:undertow-websockets-jsr 1.1.0.cr3 Source cves:...

io.undertow:undertow-servlet (1.1.0.cr4), io.undertow:undertow-websockets-jsr (1.1.0.cr4) potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.1.0.cr4)

io.undertow:undertow-core MAVEN version 1.1.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr4 - io.undertow:undertow-websockets-jsr 1.1.0.cr4 Source cves:...

com.adobe.api.platform:micro-service-container-parent (>=1.3.0, <=1.3.7), com.fizzed:ninja-undertow (>=5.5.0.undertow1, <=5.6.0.undertow1) +52 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.22.final)

io.undertow:undertow-core MAVEN version 1.3.22.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.adobe.api.platform:micro-service-container-parent =1.3.0, =5.5.0.undertow1, =2.3.7, =2.3.8 -...

com.brinkus.labs:labs-cloud-starter-service (>=1.1.0, <=1.4.0), com.gitblit.fathom:fathom-core (0.8.4) +88 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.23.final)

io.undertow:undertow-core MAVEN version 1.3.23.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.brinkus.labs:labs-cloud-starter-service =1.1.0, =1.4.0 - com.gitblit.fathom:fathom-core 0.8.4 -...

com.fitbur.testify.examples:example-junit-springboot-systemtest (>=0.1.0, <=0.1.3), com.github.almex:raildelays-assembly-descriptor (>=2.0.0-beta.1, <=2.0.0-beta.2) +5 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.14.final)

io.undertow:undertow-core MAVEN version 1.3.14.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.fitbur.testify.examples:example-junit-springboot-systemtest =0.1.0, =2.0.0-beta.1, =2.0.0-beta.1,...

io.undertow:undertow-servlet (1.3.32.final), io.undertow:undertow-websockets-jsr (1.3.32.final) potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.3.32.final)

io.undertow:undertow-core MAVEN version 1.3.32.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.32.final - io.undertow:undertow-websockets-jsr 1.3.32.final Source...

io.undertow:undertow-servlet (1.0.0.alpha6), io.undertow:undertow-websockets-jsr (1.0.0.alpha6) potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.0.0.alpha6)

io.undertow:undertow-core MAVEN version 1.0.0.alpha6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha6 - io.undertow:undertow-websockets-jsr 1.0.0.alpha6 Source...

io.mangoo:mangooio-core (4.0.0-alpha2), io.mangoo:mangooio-integration-test (4.0.0-alpha2) +21 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.4.0.cr1)

io.undertow:undertow-core MAVEN version 1.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.mangoo:mangooio-core 4.0.0-alpha2 - io.mangoo:mangooio-integration-test 4.0.0-alpha2 -...

io.undertow:undertow-servlet (1.4.9.final), io.undertow:undertow-websockets-jsr (1.4.9.final) +1 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.4.9.final)

io.undertow:undertow-core MAVEN version 1.4.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.9.final - io.undertow:undertow-websockets-jsr 1.4.9.final -...

com.datathings:greycat-taskide (>=1, <=5), com.datathings:greycat-websocket (>=1, <=8.4) +71 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.4.10.final)

io.undertow:undertow-core MAVEN version 1.4.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.datathings:greycat-taskide =1, =1, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4, =1.2.4,...

com.github.avarabyeu.jashing.extensions:jashing-cvs (>=0.0.12, <=0.0.16), com.github.avarabyeu.jashing.extensions:jashing-git (>=0.0.12, <=0.0.16) +36 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (1.4.6.final)

io.undertow:undertow-core MAVEN version 1.4.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.avarabyeu.jashing.extensions:jashing-cvs =0.0.12, =0.0.12, =0.0.12, =0.0.12, =0.0.12, =0.4.3...

app.valuationcontrol:webservice (>=0.5.0, <=0.5.1), ba.sake:sharaf_3 (>=0.0.1, <=0.7.4) +905 more potentially affected by CVE-2023-1973 via io.undertow:undertow-core (>=2.3.0.alpha1, <=2.3.12.final)

io.undertow:undertow-core MAVEN version =2.3.0.alpha1, =0.5.0, =0.0.1, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.31 and more Source cves: CVE-2023-1973 Source advisory: OSV:GHSA-97CQ-F4JM-MV8H...