CVE-2026-59298: Improper Input Validation

Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

CVE-2026-59280: Improper Limitation of a Pathname to a Restricted Directory

Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through SpringTemplateLoader. Spring Framework 7.0.0 - 7.0.8 Spring...

PT-2026-82738

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description A weakness exists where the driver fails to sanitize special elements in caller-supplied database and collection name components during the composition of the target namespace for an...

UltraJSON 5.13.0-6-g733f9e1 Out-Of-Bounds Read

UltraJSON version 5.13.0-6-g733f9e1 suffers from an out of bounds read vulnerability. UltraJSON contains an out-of-bounds read in its native C JSON decoder when processing certain incomplete JSON values supplied through an explicitly length-bounded input buffer. The affected native entry point,...

CVE-2026-30064

Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82761

Name of the Vulnerable Software and Affected Versions FFmpeg git-master commit 722a217 Description A heap overflow occurs in the ff sws alphablendaway function within the libswscale/alphablend.c component. This issue allows an attacker to trigger a Denial of Service DoS by providing a specially...

CVE-2026-30067

The free5gc v4.0.1 software is affected by a Denial of Service (DoS) vulnerability within the NRF Discovery service. The flaw exists specifically in the complexQueryFilterSubprocess function, where a crafted input can be used by an attacker to trigger the DoS condition. No specific remediation, e...

CVE-2026-30067

An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-67115

An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-35869

The LB-link Router AC450M V4.0.0 is affected by a Command Injection vulnerability in the bs_SetLimitCli_info function of the libshare.so library. The root cause is the insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. ...

CVE-2026-38347

A heap overflow vulnerability exists in the ff_sws_alphablendaway function (located in libswscale/alphablend.c) of FFmpeg (git-master commit 722a217). Attackers can exploit this flaw by providing a specially crafted input to trigger a Denial of Service (DoS) , which may cause the application to b...

CVE-2026-30058

The free5gc software, version v4.0.1 , is vulnerable to a Denial of Service (DoS) condition due to Improper Input Validation in the HTTPModifySubscription handler. An attacker can exploit this by providing a crafted input to trigger the service disruption. No specific remediation instructions or ...

PT-2026-82728

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woylie doggo allows Reflected XSS. Doggo.normalize value/2 in lib/doggo.ex returned date field values wrapped in :safe, ..., the Phoenix.HTML marker meaning "already escaped, emit verbatim", withou...

ROS-20260827-73-0017

The vulnerability of the nullinittagset function in the drivers/block/nullblk/main.c module of the Linux kernel’s block devices driver is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Secure Kernel Mode Privilege Escalation

The vulnerability of the Secure Kernel Mode feature in Windows operating systems is related to improper checking of consistency in input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2026-82428

The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its unauthenticated actions, allowing unauthenticated attackers to add a product to the cart at an arbitrary, attacker-chosen price that carries through to the checkout total when the BOGO...

PT-2026-82494

SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the id video parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes...

CVE-2026-30067

An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30070

The free5gc v4.0.1 software contains a vulnerability in the HandleGetSharedData function. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted input . The vulnerability is categorized as a high-severity issue with a CVSS score of 7.5, primarily impacting availa...

CVE-2026-30068

The software free5gc v4.0.1 is affected by a Denial of Service (DoS) vulnerability due to improper input validation within the HandleUpdate function located in /sbi/parameter_provision.go. An attacker can exploit this by providing a crafted input . No specific exploit details, proof-of-concept li...