35339 matches found
CVE-2026-47888 Spring Framework Memory Leak via SETUP Frame in RSocketMessageHandler
A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spring Framework 5.3.0 - 5.3.49 Spring Framework 5.2.0.RELEASE - 5.2.25.RELEASE...
CVE-2026-47888
A Spring RSocket application is vulnerable to a memory leak when processing a malformed SETUP frame . This issue affects multiple versions of the Spring Framework , including versions 7.0.0 - 7.0.8 , 6.2.0 - 6.2.19 , 6.1.0 - 6.1.28 , 6.0.0 - 6.0.30 , 5.3.0 - 5.3.49 , and 5.2.0.RELEASE - 5.2.25.RE...
SUSE CVE-2026-74309
In the Linux kernel, the following vulnerability has been resolved: vdpa/octeonep: fix IRQ-to-ring mapping in interrupt handler Look up the IRQ index in octhw-irqs instead of assuming irq - irqs0. This supports non-contiguous IRQ numbers and avoids incorrect ring indexing when irqs0 is not the ba...
SUSE CVE-2026-80560
In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...
PT-2026-82528
An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...
EUVD-2026-67117
A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted payload...
CVE-2026-30062: Allocation of Resources Without Limits or Throttling
An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...
CVE-2026-81573: Improper Access Control
If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially...
CVE-2026-30069
A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted payload...
CVE-2026-81834: Improper Control of Generation of Code
A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to th...
PT-2026-82533
Name of the Vulnerable Software and Affected Versions free5gc version 4.0.1 Description A NULL pointer dereference occurs in the UDMC registration handler component. This issue allows attackers to trigger a Denial of Service DoS by providing a specially crafted payload. A NULL pointer dereference...
Escargot 4.3.0-214-gfaee4437 Command Injection
An OS command injection vulnerability exists in the Escargot version 4.3.0-214-gfaee4437 crash handler due to an executable/module path being incorporated into an addr2line shell command without quoting or escaping. The resulting command is executed using system, causing shell metacharacters...
CVE-2026-30057
The free5gc v4.1.0 software is affected by a vulnerability in the CreateUEContext handler component. An attacker can exploit this issue by supplying a crafted request to trigger a Denial of Service (DoS) . No specific remediation or exploit details are provided in the documents.
CVE-2026-30062
An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...
PT-2026-82750
A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to th...
CVE-2026-30062
An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...
PT-2026-82488
Name of the Vulnerable Software and Affected Versions blackms aistack versions prior to 1.6.2 Description A path traversal issue exists in the Static File Handler component within the file src/web/server.ts. A remote attacker can manipulate the req.url argument to access files and directories...
CVE-2026-30062
An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...