622143 matches found
CVE-2026-45809
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher entry by sending a SUBSCRIBE Event: presence request with a...
CVE-2026-18103
A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI Open Management Application Programming Interface port, especially if not secured with TSIG Transaction Signature key authentication, could send a specially crafted lease creation request. This request, containing...
CVE-2026-45705
A flaw was found in OpenSIPS, a Session Initiation Protocol SIP server. A remote attacker could exploit an out-of-bounds read vulnerability in the multipart body parser by sending a specially crafted SIP message. This could cause the server to read beyond its allocated memory, leading to a denial...
CVE-2026-45809
A flaw was found in OpenSIPS, a Session Initiation Protocol SIP server. A remote attacker can cause a Denial of Service DoS by sending a SUBSCRIBE Event: presence request with an excessively long 'From' Uniform Resource Identifier URI. This action creates an oversized watcher entry. When the syst...
CVE-2026-18854 Shandong Hoteam PDM Product Data Management System DataService GetStoredClassByFilter sql injection
A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10. The impacted element is the function GetStoredClassByFilter of the file /Base/BaseService.asmx/DataService. The manipulation of the argument FilterString leads to sql injection. Remote exploitation ...
CVE-2026-67864
The CVE-2026-67864 entry concerns open62541 versions up to 1.5.5, where a flaw in the NodeManagement type-instantiation logic can be exploited remotely to trigger a denial of service. The connected sources (NVD/NVD mirror and CVE listings) confirm the affected version range and the DoS consequenc...
CVE-2026-67867
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-67866
S2OPC 1.7.3 contains a Buffer Overflow in the client wrapper DeleteMonitoredItems path, exploitable remotely to cause a denial of service. The vulnerability references the functions LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse and SOPC_StaMac_NewDeleteMonitoredItems. Exploitation details ...
CVE-2026-67872
CVE-2026-67872 affects Systerel S2OPC 1.7.3. A DoS can be triggered remotely via the event monitored-item queue resize handling. The connected CVE entry confirms the vulnerability in the monitored-item notification queue logic (src/ClientServer/services/b2c/monitored_item_notification_queue_bs.c ...
CVE-2026-67864
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logic component...
CVE-2026-67869
Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the ServiceCall validates input arguments against runtime-resolved InputArguments metadata...
CVE-2026-67871
CVE-2026-67871 : The connected data describes a Buffer Overflow in Systerel S2OPC 1.7.3 that enables a remote attacker to cause a denial of service. The vulnerability is associated with the components/files: address_space_bs.c , sopc_node_mgt_helper_internal.c , and the toolkit test server (as ci...
CVE-2026-67866
Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMacProcessMsgDeleteMonitoredItemsResponse and SOPCStaMacNewDeleteMonitoredItems in the client wrapper DeleteMonitoredItems path...
CVE-2026-67863
In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path. The issue occurs when UASubscriptionlocalPublish continues to use the current UANotification after a callback invokes UAServerdeleteMonitoredItem for the current local MonitoredItem. This allows a...
CVE-2026-67869
The CVE-2026-67869 entry describes a Buffer Overflow in open62541 v1.5.5. The vulnerability affects the open62541 OPC UA server implementation, where a flaw in Service_Call leads to overflow when validating input arguments against runtime-resolved InputArguments metadata. This enables a remote at...
CVE-2026-67867
Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data...
CVE-2026-67865
S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling. This allows a remote attacker to cause a denial of service...
CVE-2026-67863
CVE-2026-67863 affects open62541 1.5.5, where a server-side use-after-free occurs in the local MonitoredItem callback path. The issue arises when UA_Subscription_localPublish continues to use the current UA_Notification after a callback invokes UA_Server_deleteMonitoredItem for the current local ...