Lucene search
+L

1545 matches found

Vulnrichment
Vulnrichment
•added 2026/03/12 9:33 p.m.•3 views

CVE-2026-32319 Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload

Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all...

7.5CVSS5.8AI score0.00306EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/12 9:33 p.m.•7 views

CVE-2026-32319 Ella Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload

Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all...

7.5CVSS5.8AI score
SaveExploits0References3
OSV
OSV
•added 2026/03/12 8:33 p.m.•8 views

GHSA-M9PM-W3GV-C68F Ella Core vulnerable to Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload

Summary Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. Impact An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected subscribers. No authentication is required...

7.5CVSS5.8AI score0.00306EPSS
SaveExploits0References5
OSV
OSV
•added 2026/03/12 6:48 p.m.•11 views

CLSA-2026-1773334093 Update of els-os-release

Initial package...

5.8AI score
SaveExploits0References1
Microsoft Secure
Microsoft Secure
•added 2026/03/11 9:0 p.m.•23 views

Contagious Interview: Malware delivered through fake developer job interviews

Microsoft Defender Experts has observed the Contagious Interview campaign, a sophisticated social engineering operation active since at least December 2022. Microsoft continues to detect activity associated with this campaign in recent customer environments, targeting software developers at...

6.4AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
•added 2026/03/11 9:0 p.m.•39 views

Contagious Interview: Malware delivered through fake developer job interviews

Microsoft Defender Experts has observed the Contagious Interview campaign, a sophisticated social engineering operation active since at least December 2022. Microsoft continues to detect activity associated with this campaign in recent customer environments, targeting software developers at...

6.3AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/03/11 7:25 p.m.•42 views

CVE-2026-31957 Himmelblau unset domain configuration can allow any-tenant authentication at first login for remote deployments

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 3.0.0 to before 3.1.0, if Himmelblau is deployed without a configured tenant domain in himmelblau.conf, authentication is not tenant-scoped. In this mode, Himmelblau can accept authentication attempts for...

10CVSS0.00501EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/11 6:16 p.m.•9 views

CVE-2026-31975

Cloud CLI aka Claude Code UI is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.25.0, OS Command Injection via WebSocket Shell. Both projectPath and initialCommand in server/index.js are taken directly from the WebSocket message payload and interpolated into...

9.8CVSS0.03433EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/03/11 5:27 p.m.•38 views

CVE-2026-31975 Cloud CLI WebSocket shell injection

Cloud CLI aka Claude Code UI is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.25.0, OS Command Injection via WebSocket Shell. Both projectPath and initialCommand in server/index.js are taken directly from the WebSocket message payload and interpolated into...

8.7CVSS0.03433EPSS
SaveExploits1References3
OSV
OSV
•added 2026/03/11 5:27 p.m.•9 views

CVE-2026-31975 Cloud CLI WebSocket shell injection

Cloud CLI aka Claude Code UI is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI. Prior to 1.25.0, OS Command Injection via WebSocket Shell. Both projectPath and initialCommand in server/index.js are taken directly from the WebSocket message payload and interpolated into...

8.7CVSS5.9AI score
SaveExploits0References5
OSV
OSV
•added 2026/03/11 2:11 p.m.•15 views

SUSE-SU-2026:20676-1 Security update for kernel-livepatch-MICRO-6-0_Update_17

This update for kernel-livepatch-MICRO-6-0Update17 fixes the following issues: Initial livepatch for Update 17 of SLE Micro 6.0 and 6.1 kernel...

5.8AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/03/11 12:27 a.m.•8 views

SUSE CVE-2026-23907

This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6. The ExtractEmbeddedFiles example contains a path traversal vulnerability CWE-22 because the filename that is obtained from PDComplexFileSpecification.getFilename is appended...

5.3CVSS5.9AI score0.00886EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/03/11 12:9 a.m.•25 views

EUVD-2026-10908

Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing...

8.7CVSS5.8AI score0.005EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/03/11 12:9 a.m.•11 views

Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing

Summary A remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quictransportparameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap, so...

8.7CVSS5.8AI score0.005EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
•added 2026/03/11 12:0 a.m.•10 views

Cloud CLI ę“ä½œē³»ē»Ÿå‘½ä»¤ę³Øå…„ę¼ę“ž

Cloud CLI is a multi-model AI programming assistant desktop and mobile interface open-sourced by Siteboon. Versions of Cloud CLI prior to 1.25.0 contained an operating system command injection vulnerability. This vulnerability stemmed from the projectPath and initialCommand parameters in the...

9.8CVSS5.8AI score0.03433EPSS
SaveExploits1References3
NVD
NVD
•added 2026/03/10 10:16 p.m.•8 views

CVE-2026-31812

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed...

8.7CVSS0.005EPSS
SaveExploits0References8
OSV
OSV
•added 2026/03/10 10:16 p.m.•7 views

UBUNTU-CVE-2026-31812

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed...

8.7CVSS5.8AI score0.005EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/03/10 9:4 p.m.•7 views

CVE-2026-31812

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed...

8.7CVSS5.3AI score0.005EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/03/10 9:4 p.m.•37 views

CVE-2026-31812 Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed...

8.7CVSS0.005EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/10 6:31 p.m.•8 views

EUVD-2026-10480

This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.36, from 3.0.0 through 3.0.7. The ExtractEmbeddedFiles example contains a path traversal vulnerability CWE-22 because the filename that is obtained from PDComplexFileSpecification.getFilename is appended...

5.3CVSS5.8AI score0.00886EPSS
SaveExploits0References4
Rows per page
Query Builder