firefox: thunderbird: Site isolation issue in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

No d...

Exploit for CVE-2026-20349

cve-id Donate Support the maintenance of this project wit...

CVE-2026-19052 ProSolution WP Client < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog Calls

The ProSolution WP Client WordPress plugin before 2.0.9 does not perform capability checks on two administrative AJAX actions, and the nonce they rely on is published on its public frontend, allowing any authenticated user, such as a subscriber, to trigger an administrative data synchronisation a...

CVE-2026-13612 KiviCare < 4.5.2 - Patient+ Cross-Patient Bill, Invoice and Appointment Disclosure via IDOR

The KiviCare WordPress plugin before 4.5.2 does not verify that the requesting user owns the records being accessed, allowing authenticated patient-level users to read other patients' bills, invoices and appointment details...

CVE-2025-15687

A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smfgxccacb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may b...

CVE-2025-15684

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diamlogfunc of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading...

CVE-2025-15687 Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service

A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smfgxccacb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may b...

EUVD-2025-210704

A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smfgxccacb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may b...

CVE-2025-15686

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fdmsgsessget of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public a...

EUVD-2025-210703

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fdmsgsessget of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public a...

CVE-2025-15686 Open5GS HSS Service fd_msg_sess_get denial of service

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fdmsgsessget of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public a...

GHSA-WMF9-8JQM-79P6 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-71870 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-15684 Open5GS CER init.c diam_log_func assertion

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diamlogfunc of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading...

EUVD-2025-210701

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diamlogfunc of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading...

CVE-2025-15684

Open5GS (affected up to 2.7.6) is vulnerable via diam_log_func in lib/diameter/common/init.c (CER Handler). The issue allows a remote attacker to trigger a reachable assertion. Public exploit appears available. Remediation: upgrade to Open5GS 2.7.7, which includes patch c1a803516a3c0485696cb9bcca...

CVE-2026-72526

Summary: CVE-2026-72526 concerns the multicloud-integrations component where the Application propagation controller mishandles the ocm-managed-cluster annotation from an Application CR without sufficient validation. This allows a hub-cluster tenant with permission to create Applications to target...

CVE-2024-14044 Open5GS Diameter Rx pcrf-rx-path.c pcrf_rx_aar_cb buffer overflow

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument numofmediacomponent/numofsub leads to buffer overflow. The attack can be initiated remotely...

CVE-2024-14044

A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrfrxaarcb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument numofmediacomponent/numofsub leads to buffer overflow. The attack can be initiated remotely...