EUVD-2024-55716

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument numofmediacomponent/numofsub leads to buffer overflow. The attack can be initiated remotely...

PT-2026-71178

Name of the Vulnerable Software and Affected Versions Apache Allura versions prior to 1.19.1 Description Specifically crafted inputs may lead to git argument injection, a flaw where an attacker can insert unauthorized arguments into a git command executed by the application. Recommendations Upgra...

PT-2026-71365

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdf webkit meta tags and turns each one into a wkhtmltopdf command line...

CVE-2026-73240: Improper Neutralization of Argument Delimiters in a Command

Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

PT-2026-71475

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A stack buffer overflow occurs during argument name...

CVE-2026-68171

A flaw was found in the Linux kernel's arm64 syscall handling. A local attacker with the ability to trace processes using ptrace could manipulate syscall arguments after security checks like seccomp, or secure computing mode have been performed. This occurs because the kernel's internal record of...

CVE-2026-59086

A vulnerability has been identified in Simcenter Femap All versions V2606, Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execut...

CVE-2026-59086

A vulnerability has been identified in Simcenter Femap All versions V2606, Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execut...

EUVD-2026-56120

A vulnerability has been identified in Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current...

CVE-2026-59086

CVE-2026-59086 affects Simcenter Nastran before version V2606. The vulnerability is a stack overflow when parsing specially crafted strings as an argument to a binary, which could allow code execution in the current process. The connected documents confirm the same description across sources (NVD...

CVE-2026-59086

A vulnerability has been identified in Simcenter Femap All versions V2606, Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execut...

CVE-2026-59086

A vulnerability has been identified in Simcenter Femap All versions V2606, Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execut...

CVE-2026-72538

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...

CVE-2026-72538

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...

CVE-2026-72538 PrefectHQ Prefect - Argument Injection

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...

CVE-2026-72538 PrefectHQ Prefect - Argument Injection

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...

EUVD-2026-56008

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...

CVE-2026-72538

CVE-2026-72538 affects PrefectHQ Prefect up to version 3.8.2. An argument injection flaw occurs in the git_clone pull step where the branch field is passed directly to git pull without sanitization, enabling an authenticated user to achieve remote code execution on the Prefect server. The issue i...

CVE-2026-72538 PrefectHQ Prefect - Argument Injection

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...

CVE-2026-72538: Improper Neutralization of Argument Delimiters in a Command

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...