212990 matches found
SUSE CVE-2026-80587
In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions Some MPTCP suboptions are mutually exclusive according to the RFC8684, but also because in different places, the code doesn't expect some combinations to be present. That's speciall...
CVE-2026-30071
An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30071
An issue in the RechargePut function of free5gc v4.0.1 allows an attacker to trigger a Denial of Service (DoS) condition by providing a crafted input . The vulnerability is characterized as an Allocation of Resources Without Limits or Throttling . No specific exploit details or remediation instru...
CVE-2026-30064
The software free5gc v4.0.1 is vulnerable to a Denial of Service (DoS) attack due to improper input validation in the buildFilter function located in processor/processor.go . An attacker can trigger this condition by providing a crafted input . No specific exploitation details or remediation step...
PT-2026-82532
Name of the Vulnerable Software and Affected Versions free5gc version 4.0.1 Description Improper input validation in the HandleUpdate function located in /sbi/parameter provision.go allows attackers to cause a Denial of Service DoS, a condition where the service becomes unavailable to its intende...
EUVD-2026-67109
Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-82770
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their format, allowing...
CVE-2026-30070
An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30064
Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30058
Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30060
An issue in free5gc v4.0.1 allows attackers to cause a Denial of Service DoS when parsing crafted SUCI data during UE registration...
CVE-2026-30068: Improper Input Validation
Improper input validation in the HandleUpdate function /sbi/parameterprovision.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-47880: Improper Input Validation
A producer who can publish to a JMS destination consumed by any Spring Integration JMS inbound component can set String JMS properties named replyChannel, errorChannel, or jsonTypeId which are copied verbatim into the Spring Integration MessageHeaders. Spring Integration 7.1.0 Spring Integration...
CVE-2026-30070
An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-82659
A Command Injection vulnerability exists in the bs SetLimitCli info function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...
CVE-2026-38345
A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-82506
Name of the Vulnerable Software and Affected Versions syWEB versions prior to 27082026 Description Improper neutralization of input during web page generation in syWEB allows Reflected XSS, a type of cross-site scripting where malicious scripts are reflected off a web application to the victim's...
CVE-2026-38345
A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-38350
An integer overflow in the targetswsfuzzer function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
PT-2026-82693
Name of the Vulnerable Software and Affected Versions Spring Framework versions 7.0.0 through 7.0.8 Spring Framework versions 6.2.0 through 6.2.19 Spring Framework versions 6.1.0 through 6.1.28 Spring Framework versions 6.0.0 through 6.0.30 Spring Framework versions 5.3.0 through 5.3.49 Spring...