147029 matches found
CVE-2026-26456: Concurrent Execution using Shared Resource with Improper Synchronization
A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...
CVE-2026-30059
An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...
EUVD-2026-67266
User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the application users via sending a specially crafted POST request to the affected endpoint with a chosen 'username' parameter to test if the user exists...
PT-2026-82468
Unauthenticated Cross Site Request Forgery CSRF in GeoDirectory = 2.8.176 versions...
CVE-2026-37069: Exposure of Sensitive Information to an Unauthorized Actor
Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to know in which system directory the application code is running by sending a GET request to the endpoint...
CVE-2026-37067
Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request...
CVE-2026-30047
A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...
CVE-2026-30046
The Open5GS v2.7.6 software contains a reachable assertion vulnerability within the NUDM-UECM interface . An attacker can exploit this flaw by supplying a crafted DELETE request , which leads to a Denial of Service (DoS) . No specific remediation, exploit links, or MITRE ATT&CK IDs are provided i...
CVE-2026-30050
The free5gc v4.1.0 software is vulnerable to a Denial of Service (DoS) attack due to an issue in the ModifyAMFEventSubscriptionProcedure function located in processor/event_exposure.go . An attacker can trigger this condition by supplying a crafted PATCH request . No specific remediation or explo...
CVE-2026-37064: Observable Discrepancy
User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the application users via sending a specially crafted POST request to the affected endpoint with a chosen 'username' parameter to test if the user exists...
CVE-2026-30047
The Open5GS v2.7.6 software contains a reachable assertion vulnerability within the /nsmf-pdusession/v1/sm-contexts component. This flaw allows an attacker to trigger a Denial of Service (DoS) condition by submitting a specially crafted DELETE request . No specific remediation instructions, explo...
CVE-2026-30045
An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted HTTP/2 GET request...
CVE-2026-30059
An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...
PT-2026-82562
FrontAccounting through 2.4.20 generates a CSRF token in end form in includes/ui/ui controls.inc and embeds it as the token hidden field in every form it renders, but only admin/users.php and admin/change current user password.php call check csrf token to validate it. No financial transaction...
EUVD-2026-67103
A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...
PT-2026-82519
A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...
CVE-2026-30046
A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...
CVE-2026-37064
User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the application users via sending a specially crafted POST request to the affected endpoint with a chosen 'username' parameter to test if the user exists...
