Lucene search
+L

27 matches found

attackerkb
attackerkb
•added 2026/03/20 8:09 a.m.•16 views

CVE-2026-33192

Free5GC is an open-source Linux Foundation project for 5th generation 5G mobile core networks. In versions prior to 1.4.2, the UDM incorrectly converts a downstream 400 Bad Request from UDR into a 500 Internal Server Error when handling PATCH requests with an empty supi path parameter...

8.7CVSS6.7AI score0.00416EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2026/03/20 8:09 a.m.•60 views

CVE-2026-33192

CVE-2026-33192 — Free5GC UDM PATCH handling issue : In Free5GC UDM (pre-1.4.2), PATCH requests with an empty supi path parameter can trigger internal misbehavior: a 400 from UDR is converted to 500, and PATCH is inappropriately translated to PUT when forwarded to UDR. This reveals internal error ...

8.7CVSS6.6AI score0.00416EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2026/03/20 8:03 a.m.•61 views

CVE-2026-33065

CVE-2026-33065 affects Free5GC UDM (core network component) prior to version 1.4.2. When handling DELETE requests with an empty supi path (e.g., // in the URL), UDM forwards the malformed request to UDR (which returns 400) but UDM propagates it as 500 SYSTEM_FAILURE, leaking internal error handli...

6.9CVSS6.7AI score0.00443EPSS
SaveExploits1References4Affected Software1
osv_ubuntu
osv_ubuntu
•added 2026/03/20 12:00 a.m.•27 views

UBUNTU-CVE-2026-33192

Free5GC is an open-source Linux Foundation project for 5th generation 5G mobile core networks. In versions prior to 1.4.2, the UDM incorrectly converts a downstream 400 Bad Request from UDR into a 500 Internal Server Error when handling PATCH requests with an empty supi path parameter...

8.7CVSS6.6AI score0.00416EPSS
SaveExploits1References5
NCSC
NCSC
•added 2023/07/19 12:00 a.m.•34 views

Vulnerabilities fixed in Oracle Communications

Vulnerabilities have been fixed in Oracle Communications products. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code executio...

9.8CVSS7.1AI score0.99569EPSS
SaveExploits63
NCSC
NCSC
•added 2023/04/19 12:00 a.m.•36 views

Vulnerabilities fixed in Oracle Communications

Vulnerabilities have been fixed in Oracle Communications. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Bypassing authentication Remote code execution User rights Access to system data...

10CVSS7.1AI score0.99569EPSS
SaveExploits54
Tenable Nessus
Tenable Nessus
•added 2022/07/29 12:00 a.m.•204 views

EulerOS 2.0 SP10 : gzip (EulerOS-SA-2022-2158)

According to the versions of the gzip package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Oracle Communications Cloud Native Core Unified Data Repository product of Oracle Communications component: UDR GNU Gzip. The...

8.8CVSS6.6AI score0.05205EPSS
SaveExploits0References2
Rows per page
Query Builder