Lucene search
+L

725 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/28 12:00 a.m.•7 views

CVE-2026-4998: Improper Control of Generation of Code

A weakness has been identified in Sinaptik AI PandasAI up to 3.0.0. This vulnerability affects the function CodeExecutor.execute of the file pandasai/core/codeexecution/codeexecutor.py of the component Chat Message Handler. Executing a manipulation can lead to code injection. The attack may be...

7.5CVSS6.7AI score0.00542EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/27 10:16 p.m.•24 views

CVE-2026-4988

A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smfgxccacb/smfgyccacb/smfs6b of the component CCA Message Handler. The manipulation results in denial of service. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitabilit...

6.3CVSS0.00576EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/03/27 9:27 p.m.•52 views

CVE-2026-4988 Open5GS CCA Message smf_s6b denial of service

A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smfgxccacb/smfgyccacb/smfs6b of the component CCA Message Handler. The manipulation results in denial of service. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitabilit...

6.3CVSS0.00576EPSS
SaveExploits1References6
CVE
CVE
•added 2026/03/27 9:27 p.m.•43 views

CVE-2026-4988

Open5GS 2.7.6 contains a denial-of-service vulnerability in the CCA Message Handler, affecting the functions smf_gx_cca_cb, smf_gy_cca_cb, and smf_s6b. The issue can be triggered remotely and stems from the manipulation of the mentioned components. Exploitability is described as difficult, and ex...

6.3CVSS4.3AI score0.00576EPSS
SaveExploits1References6Affected Software1
attackerkb
attackerkb
•added 2026/03/27 9:27 p.m.•11 views

CVE-2026-4988

A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smfgxccacb/smfgyccacb/smfs6b of the component CCA Message Handler. The manipulation results in denial of service. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitabilit...

6.3CVSS4.3AI score0.00576EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2026/03/27 9:27 p.m.•12 views

CVE-2026-4988 Open5GS CCA Message smf_s6b denial of service

A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smfgxccacb/smfgyccacb/smfs6b of the component CCA Message Handler. The manipulation results in denial of service. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitabilit...

6.3CVSS4.3AI score0.00576EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2026/03/27 9:27 p.m.•21 views

CVE-2026-4988 Open5GS CCA Message smf_s6b denial of service

A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smfgxccacb/smfgyccacb/smfs6b of the component CCA Message Handler. The manipulation results in denial of service. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitabilit...

6.3CVSS4.8AI score
SaveExploits0References8
Mend
Mend
•added 2026/03/27 9:27 p.m.•27 views

CVE-2026-4988

A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smfgxccacb/smfgyccacb/smfs6b of the component CCA Message Handler. The manipulation results in denial of service. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitabilit...

6.3CVSS4.3AI score0.00576EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2026/03/27 12:00 a.m.•26 views

PT-2026-28707

Name of the Vulnerable Software and Affected Versions Open5GS version 2.7.6 Description A security flaw exists in Open5GS 2.7.6, specifically within the CCA Message Handler component and the smf gx cca cb/smf gy cca cb/smf s6b function. This manipulation can lead to a denial of service. The attac...

6.3CVSS4.9AI score0.00576EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/27 12:00 a.m.•8 views

CVE-2026-4988: Improper Resource Shutdown or Release

A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smfgxccacb/smfgyccacb/smfs6b of the component CCA Message Handler. The manipulation results in denial of service. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitabilit...

6.3CVSS4.6AI score0.00576EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/03/26 3:07 p.m.•20 views

CVE-2026-4175

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS3.2AI score0.00258EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/03/23 6:14 p.m.•13 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the ULNASTransport message handler when processing malformed messages that lack a Request Type. An attacker can cause the application to panic and potentially disrupt service by sending specially crafted...

7.5CVSS6.9AI score0.00379EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/03/16 3:30 p.m.•38 views

Aureus ERP vulnerable to cross-site scripting in the Chatter Message Handler

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA1. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS3.1AI score0.00258EPSS
SaveExploits0References8Affected Software1
osv_ghsa
osv_ghsa
•added 2026/03/16 3:30 p.m.•27 views

GHSA-76C2-3Q6G-XVPM Aureus ERP vulnerable to cross-site scripting in the Chatter Message Handler

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA1. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS3.5AI score0.00258EPSS
SaveExploits0References8
Snyk
Snyk
•added 2026/03/16 3:30 p.m.•12 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Chatter Message Handler process. An attacker can inject and execute arbitrary scripts by manipulating the subject or body arguments. Details Cross-site scripting or XSS is a code vulnerability that occurs...

5.1CVSS5.2AI score0.00258EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/16 3:30 p.m.•24 views

EUVD-2026-12224

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS3.2AI score0.00258EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•9 views

CVE-2026-4175: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS3.2AI score0.00258EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/03/15 10:32 a.m.•28 views

CVE-2026-4175 Aureus ERP Chatter Message content-text-entry.blade.php cross site scripting

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS4.2AI score
SaveExploits0References8
attackerkb
attackerkb
•added 2026/03/15 10:32 a.m.•10 views

CVE-2026-4175

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS3.2AI score0.00258EPSS
SaveExploits0References7
Mend
Mend
•added 2026/03/15 10:32 a.m.•9 views

CVE-2026-4175

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS3.1AI score0.00258EPSS
SaveExploits0References9
Rows per page
Query Builder