Lucene search
+L

55768 matches found

Cvelist
Cvelist
•added 2026/05/27 5:18 p.m.•62 views

CVE-2026-45081 Frappe HR: Permission Bypass in HRMS Leave Details API

Frappe HR is an open-source human resources management solution HRMS. Prior to 16.5.0, authenticated employees could access other employees’ leave details due to improper authorization checks. This vulnerability is fixed in 16.5.0...

6.5CVSS0.0034EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/05/27 5:18 p.m.•19 views

CVE-2026-45081 Frappe HR: Permission Bypass in HRMS Leave Details API

Frappe HR is an open-source human resources management solution HRMS. Prior to 16.5.0, authenticated employees could access other employees’ leave details due to improper authorization checks. This vulnerability is fixed in 16.5.0...

6.5CVSS5.9AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/05/27 5:18 p.m.•32 views

EUVD-2026-32608

Frappe HR is an open-source human resources management solution HRMS. Prior to 16.5.0, authenticated employees could access other employees’ leave details due to improper authorization checks. This vulnerability is fixed in 16.5.0...

6.5CVSS5.9AI score0.0034EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/27 5:16 p.m.•66 views

CVE-2026-44322

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF PATCH /3gpp-pfd-management/v1/afId/transactions/transId/applications/appId handler panics with a nil-pointer dereference when the upstream UDR call fails AND the consumer wrapper returns err != nil...

7.5CVSS0.00655EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2026/05/27 5:16 p.m.•20 views

CVE-2026-44353

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.4.0, Streamlink's HLS and DASH parsers do not validate the URI scheme of segment entries and other resources. A remote .m3u8 HLS playlist or .mpd DASH manifest can list file:///path/to/file...

6.5CVSS5.9AI score0.00454EPSS
SaveExploits1References2
osv_cga
osv_cga
•added 2026/05/27 4:59 p.m.•5 views

CGA-5JPM-PM98-X52G

Bulletin has no description...

9.1CVSS6AI score0.00487EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/05/27 3:53 p.m.•20 views

CVE-2026-42459

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate the supi path parameter in six GET handlers of the nudm-sdm Subscriber Data Management service. An unauthenticated attacker can inject control characters into the SUPI...

8.7CVSS8.3AI score0.00448EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2026/05/27 3:53 p.m.•54 views

CVE-2026-42459

CVE-2026-42459 documents an improper input validation flaw in free5GC UDM: the SDM (nudm-sdm) service does not validate the SUPI parameter in six GET handlers, allowing an unauthenticated attacker to inject control characters into SUPI. This can cause UDM to forward a malformed URL to UDR and ret...

8.7CVSS8.3AI score0.00448EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/27 3:53 p.m.•17 views

CVE-2026-42459 free5GC: Improper Input Validation and Generation of Error Message Containing Sensitive Information in github.com/free5gc/udm

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate the supi path parameter in six GET handlers of the nudm-sdm Subscriber Data Management service. An unauthenticated attacker can inject control characters into the SUPI...

8.7CVSS8.3AI score0.00448EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2026/05/27 3:53 p.m.•29 views

CVE-2026-42459 free5GC: Improper Input Validation and Generation of Error Message Containing Sensitive Information in github.com/free5gc/udm

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the free5GC UDM component fails to validate the supi path parameter in six GET handlers of the nudm-sdm Subscriber Data Management service. An unauthenticated attacker can inject control characters into the SUPI...

8.7CVSS8.3AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/27 3:46 p.m.•30 views

CVE-2026-44322

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF PATCH /3gpp-pfd-management/v1/afId/transactions/transId/applications/appId handler panics with a nil-pointer dereference when the upstream UDR call fails AND the consumer wrapper returns err != nil...

7.5CVSS8.3AI score0.00655EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2026/05/27 3:46 p.m.•20 views

CVE-2026-44322 free5GC: NEF 3gpp-pfd-management PATCH applications/{appId} panics on UDR access failure due to nil ProblemDetails dereference

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF PATCH /3gpp-pfd-management/v1/afId/transactions/transId/applications/appId handler panics with a nil-pointer dereference when the upstream UDR call fails AND the consumer wrapper returns err != nil...

7.5CVSS5.9AI score
SaveExploits0References6
osv_cga
osv_cga
•added 2026/05/27 3:23 p.m.•2 views

CGA-5R5R-8HJ8-9JXG

Bulletin has no description...

9.1CVSS5.8AI score0.00637EPSS
SaveExploits0References7
osv_cga
osv_cga
•added 2026/05/27 2:05 p.m.•5 views

CGA-22P2-87MG-5WMF

Bulletin has no description...

6.5CVSS5.8AI score0.00281EPSS
SaveExploits0References7
osv_cga
osv_cga
•added 2026/05/27 1:27 p.m.•2 views

CGA-4RXQ-QQWC-67VQ

Bulletin has no description...

7.5CVSS6.4AI score0.00623EPSS
SaveExploits0References74
osv_cga
osv_cga
•added 2026/05/27 1:26 p.m.•3 views

CGA-644Q-2JCH-MRRV

Bulletin has no description...

9.1CVSS6.4AI score0.00487EPSS
SaveExploits0References7
osv_cga
osv_cga
•added 2026/05/27 1:26 p.m.•4 views

CGA-44FQ-VGRX-JCH5

Bulletin has no description...

6.5CVSS5.8AI score0.00281EPSS
SaveExploits0References7
osv_cga
osv_cga
•added 2026/05/27 1:08 p.m.•4 views

CGA-63RH-MQC2-2JJ2

Bulletin has no description...

9.1CVSS5.8AI score0.00637EPSS
SaveExploits0References7
osv_cga
osv_cga
•added 2026/05/27 1:08 p.m.•3 views

CGA-3P5F-CHC5-HWGH

Bulletin has no description...

5.3CVSS5.8AI score0.00515EPSS
SaveExploits0References7
osv_cga
osv_cga
•added 2026/05/27 1:08 p.m.•4 views

CGA-3QJ5-6QX7-W9QR

Bulletin has no description...

7.5CVSS6.1AI score0.0062EPSS
SaveExploits0References7
Rows per page
Query Builder