Lucene search
+L

143 matches found

Positive Technologies
Positive Technologies
added 2025/12/19 12:0 a.m.6 views

PT-2025-52483

Name of the Vulnerable Software and Affected Versions Open5GS versions up to 2.7.5 Description A flaw exists in Open5GS impacting the ogs pfcp handle create pdr function within the lib/pfcp/handler.c library of the FAR-ID Handler component. This can lead to a null pointer dereference, potentially...

5.3CVSS3.9AI score0.00402EPSS
SaveExploits1References10
Snyk
Snyk
added 2025/12/18 7:45 p.m.5 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the parseFAR function when processing a PFCP Session Establishment Request containing a CreateFAR with an empty or truncated IPv4 address field. An attacker can cause the service to crash and disrupt user-plane...

8.8CVSS5.8AI score0.0036EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/12/18 7:45 p.m.4 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the parseFAR function when processing a PFCP Session Establishment Request containing a CreateFAR with an empty or truncated IPv4 address field. An attacker can cause the service to crash and disrupt user-plane...

8.8CVSS5.8AI score0.0036EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/12/18 12:0 a.m.31 views

CVE-2025-65568

A denial-of-service vulnerability exists in the omec-project UPF pfcpiface component in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a PFCP Session Establishment Request that includes a CreateFAR with an empty or truncated IPv4 address field is not properly validated. During...

0.0036EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.8 views

PT-2025-52291

Name of the Vulnerable Software and Affected Versions omec-project UPF versions upf-epc-pfcpiface:2.1.3-dev Description A denial-of-service issue exists in the omec-project UPF pfcpiface component. Specifically, a PFCP Session Establishment Request containing a CreateFAR with an invalid IPv4...

7.5CVSS6.5AI score0.0036EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/11/12 3:4 a.m.4 views

EUVD-2025-117386

Malicious code in far-pink-anglerfish npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 3:4 a.m.4 views

Malicious code in far-pink-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c965672f482780685fcb3533f0acd0769416f4c3afc12bb4d9cbb5d910221e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 7:47 a.m.1 views

EUVD-2025-74663

Malicious code in farearthwormpeach-80 npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 7:26 a.m.3 views

EUVD-2025-81935

Malicious code in farhornetreplicateautomation npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 7:1 a.m.4 views

EUVD-2025-71574

Malicious code in farminkz3n npm...

6.6AI score
SaveExploits0
OSV
OSV
added 2025/11/11 4:25 a.m.3 views

MAL-2025-85482 Malicious code in far_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2373cebcacbd66ef305bd2acb68a8fb944d9e4baa2d17ecc04bce78630d122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 4:25 a.m.1 views

EUVD-2025-86091

Malicious code in farhalibutz3n npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 12:41 a.m.0 views

EUVD-2025-54402

Malicious code in far-aquamarine-parakeet npm...

6.6AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 12:41 a.m.2 views

EUVD-2025-54401

Malicious code in far-cyan-mite npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 12:41 a.m.4 views

Malicious code in far-cyan-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944b21974b029f88f19d57fdca99b2d70d2185ad7d32292d5291b2a1d6ba76a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/11/11 12:41 a.m.1 views

EUVD-2025-54400

Malicious code in far-jade-porcupine npm...

6.6AI score
SaveExploits0
OSV
OSV
added 2025/11/11 12:41 a.m.2 views

MAL-2025-68248 Malicious code in far-cyan-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944b21974b029f88f19d57fdca99b2d70d2185ad7d32292d5291b2a1d6ba76a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2025/10/21 12:0 a.m.7 views

WordPress Find And Replace content plugin cross-site scripting vulnerability

WordPress Find And Replace content plugin is a plugin used to batch find and replace the specified text in the website content, mainly used to solve the problem of batch modification in the website content update demand. A cross-site scripting vulnerability exists in the WordPress Find And Replac...

7.2CVSS6.2AI score0.00265EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/15 9:15 a.m.11 views

CVE-2025-10313

The Find And Replace content for WordPress plugin for WordPress is vulnerable to unauthorized Stored Cross-Site Scripting and Arbitrary Content Replacement due to a missing capability check on the faradminajaxfun function in all versions up to, and including, 1.1. This makes it possible for...

7.2CVSS0.00265EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2012-1655

Malware in sbrugna...

2.6CVSS6.4AI score0.014EPSS
SaveExploits0References9
Rows per page
Query Builder