210468 matches found
PT-2026-82728
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woylie doggo allows Reflected XSS. Doggo.normalize value/2 in lib/doggo.ex returned date field values wrapped in :safe, ..., the Phoenix.HTML marker meaning "already escaped, emit verbatim", withou...
PT-2026-82530
Name of the Vulnerable Software and Affected Versions free5gc version 4.0.1 Description Improper input validation in the buildFilter function located in processor/processor.go allows attackers to cause a Denial of Service DoS, a condition where the system becomes unavailable to its intended users...
CVE-2026-30070
An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30064
Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-35869
A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...
PT-2026-82659
A Command Injection vulnerability exists in the bs SetLimitCli info function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...
PT-2026-82531
An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30067
An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
EUVD-2026-67115
An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-47880: Improper Input Validation
A producer who can publish to a JMS destination consumed by any Spring Integration JMS inbound component can set String JMS properties named replyChannel, errorChannel, or jsonTypeId which are copied verbatim into the Spring Integration MessageHeaders. Spring Integration 7.1.0 Spring Integration...
CVE-2026-30063
The free5gc v4.0.1 software contains a vulnerability in its NF Discovery endpoint . An attacker can trigger a Denial of Service (DoS) by sending a crafted snssais query . According to the Rapid7 documentation, the root cause is the allocation of resources without limits or throttling . Exploitati...
CVE-2026-30071
An issue in the RechargePut function of free5gc v4.0.1 allows an attacker to trigger a Denial of Service (DoS) condition by providing a crafted input . The vulnerability is characterized as an Allocation of Resources Without Limits or Throttling . No specific exploit details or remediation instru...
CVE-2026-30058
The free5gc software, version v4.0.1 , is vulnerable to a Denial of Service (DoS) condition due to Improper Input Validation in the HTTPModifySubscription handler. An attacker can exploit this by providing a crafted input to trigger the service disruption. No specific remediation instructions or ...
CVE-2026-30067
The free5gc v4.0.1 software is affected by a Denial of Service (DoS) vulnerability within the NRF Discovery service. The flaw exists specifically in the complexQueryFilterSubprocess function, where a crafted input can be used by an attacker to trigger the DoS condition. No specific remediation, e...
CVE-2026-30068
The software free5gc v4.0.1 is affected by a Denial of Service (DoS) vulnerability due to improper input validation within the HandleUpdate function located in /sbi/parameter_provision.go. An attacker can exploit this by providing a crafted input . No specific exploit details, proof-of-concept li...
CVE-2026-30070
The free5gc v4.0.1 software contains a vulnerability in the HandleGetSharedData function. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted input . The vulnerability is categorized as a high-severity issue with a CVSS score of 7.5, primarily impacting availa...
CVE-2026-35869
The LB-link Router AC450M V4.0.0 is affected by a Command Injection vulnerability in the bs_SetLimitCli_info function of the libshare.so library. The root cause is the insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. ...
CVE-2026-30064
The software free5gc v4.0.1 is vulnerable to a Denial of Service (DoS) attack due to improper input validation in the buildFilter function located in processor/processor.go . An attacker can trigger this condition by providing a crafted input . No specific exploitation details or remediation step...
PT-2026-82770
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their format, allowing...