210156 matches found
CVE-2026-30068
Improper input validation in the HandleUpdate function /sbi/parameterprovision.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30058
Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-82738
Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description A weakness exists where the driver fails to sanitize special elements in caller-supplied database and collection name components during the composition of the target namespace for an...
CVE-2026-30071: Allocation of Resources Without Limits or Throttling
An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30068: Improper Input Validation
Improper input validation in the HandleUpdate function /sbi/parameterprovision.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30064: Improper Input Validation
Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30058: Improper Input Validation
Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-82506
Name of the Vulnerable Software and Affected Versions syWEB versions prior to 27082026 Description Improper neutralization of input during web page generation in syWEB allows Reflected XSS, a type of cross-site scripting where malicious scripts are reflected off a web application to the victim's...
CVE-2026-30063
An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...
CVE-2026-38345
FFmpeg contains a Division-by-Zero vulnerability within the ff_sws_init_single_context function (located in /libswscale/utils.c) of version N-122528-gdd2976b9e1 . A remote attacker can provide a specially crafted input to trigger this flaw, resulting in a Denial of Service (DoS) where the applica...
CVE-2026-38345
A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-38345
A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-38350
An integer overflow in the targetswsfuzzer function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
ROS-20260827-73-0029
The vulnerability of the ieee80211probeclient function in the net/mac80211/cfg.c module of the mac80211 stack in the Linux operating system is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2026-26452: Improper Input Validation
ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when processing COAP messages containing invalid option numbers...
CVE-2026-38347
A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-82574
The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted...
PT-2026-82428
The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its unauthenticated actions, allowing unauthenticated attackers to add a product to the cart at an arbitrary, attacker-chosen price that carries through to the checkout total when the BOGO...
