Lucene search
+L

432 matches found

OSV
OSV
added 2026/02/22 2:16 p.m.6 views

CVE-2019-25442

Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter. Attackers can send GET requests to memberprofile.asp with malicious PF values to extract sensitive database information...

7.5CVSS5.9AI score
Exploits0References2
Cvelist
Cvelist
added 2026/02/22 1:18 p.m.30 views

CVE-2019-25442 Web Wiz Forums 12.01 SQL Injection via PF Parameter

Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter. Attackers can send GET requests to memberprofile.asp with malicious PF values to extract sensitive database information...

8.8CVSS0.0038EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/02/22 1:18 p.m.5 views

CVE-2019-25442

Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter. Attackers can send GET requests to memberprofile.asp with malicious PF values to extract sensitive database information...

8.8CVSS5.9AI score0.0038EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/22 1:18 p.m.3 views

CVE-2019-25442 Web Wiz Forums 12.01 SQL Injection via PF Parameter

Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter. Attackers can send GET requests to memberprofile.asp with malicious PF values to extract sensitive database information...

8.8CVSS6AI score0.0038EPSS
Exploits1References2
NVD
NVD
added 2026/02/15 1:16 p.m.10 views

CVE-2026-2517

A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogsgtp2parsetft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf0.content.length results in denial of service. The attack is possible to be carri...

7.5CVSS0.00499EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2026/02/15 12:32 p.m.7 views

CVE-2026-2517 Open5GS SMF types.c ogs_gtp2_parse_tft denial of service

A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogsgtp2parsetft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf0.content.length results in denial of service. The attack is possible to be carri...

6.9CVSS5.2AI score0.00499EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2026/02/15 12:32 p.m.10 views

CVE-2026-2517

A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogsgtp2parsetft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf0.content.length results in denial of service. The attack is possible to be carri...

6.9CVSS5.2AI score0.00499EPSS
Exploits1References6
OSV
OSV
added 2026/02/15 12:32 p.m.4 views

CVE-2026-2517 Open5GS SMF types.c ogs_gtp2_parse_tft denial of service

A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogsgtp2parsetft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf0.content.length results in denial of service. The attack is possible to be carri...

6.9CVSS6AI score0.00499EPSS
Exploits1References8
EUVD
EUVD
added 2026/02/15 12:32 p.m.6 views

EUVD-2026-5828

A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogsgtp2parsetft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf0.content.length results in denial of service. The attack is possible to be carri...

6.9CVSS5.2AI score0.00499EPSS
Exploits1References6
Cvelist
Cvelist
added 2026/02/12 8:42 p.m.33 views

CVE-2026-26011 Critical Heap Out-of-bounds Access in `pf_cluster_stats()` via Malicious /initialpose Covariance -- Potential Remote Code Execution

navigation2 is a ROS 2 Navigation Framework and System. In 1.3.11 and earlier, a critical heap out-of-bounds write vulnerability exists in Nav2 AMCL's particle filter clustering logic. By publishing a single crafted geometrymsgs/PoseWithCovarianceStamped message with extreme covariance values to...

9.3CVSS0.00517EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/02/11 12:0 a.m.4 views

CVE-2025-67135

Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack...

5.6AI score0.00349EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/11 12:0 a.m.4 views

CVE-2025-67135

Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack...

5.6AI score0.00349EPSS
Exploits0References2
CVE
CVE
added 2026/02/11 12:0 a.m.12 views

CVE-2025-67135

CVE-2025-67135 affects PGST PG107 Alarm System 1.25.05.hf via the PF-50 1.2 keyfob. The root cause is weak security in the keyfob enabling code replay attacks that compromise access control. Exploitation is not described in the provided documents; CVSSv3.1 indicates a critical impact (AV:N/AC:L/P...

9.8CVSS5.6AI score0.00349EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/11 12:0 a.m.33 views

CVE-2025-67135

Weak Security in the PF-50 1.2 keyfob of PGST PG107 Alarm System 1.25.05.hf allows attackers to compromise access control via a code replay attack...

0.00349EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.7 views

PGST PG107 安全漏洞

PGST PG107 is a wireless intelligent anti-theft alarm system developed by China’s PGST company. The version PGST PG107 1.25.05.hf contains a security vulnerability. This vulnerability stems from the weak security of the PF-50 1.2 key card, which may allow attackers to exploit code reassembly...

9.8CVSS5.9AI score0.00349EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.5 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-46765)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46765 advisory. - In the Linux kernel, the following vulnerability has been resolved: ice: protect XDP configuration with a...

5.5CVSS6.3AI score0.00235EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.6 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-46770)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46770 advisory. - In the Linux kernel, the following vulnerability has been resolved: ice: Add netifdeviceattach/detach into P...

5.5CVSS6.8AI score0.0024EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/01/17 12:25 a.m.4 views

SUSE CVE-2025-71137

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" This patch ensures that the RX ring size rxpending is not set below the permitted length. This avoids UBSAN shift-out-of-bounds errors when users passes small or zero ring size...

5.5CVSS6.6AI score0.00157EPSS
Exploits0References20
Microsoft CVE
Microsoft CVE
added 2026/01/16 9:2 a.m.7 views

octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"

...

7.8CVSS5.4AI score0.00157EPSS
Exploits0
NVD
NVD
added 2026/01/14 3:16 p.m.11 views

CVE-2025-71137

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" This patch ensures that the RX ring size rxpending is not set below the permitted length. This avoids UBSAN shift-out-of-bounds errors when users passes small or zero ring size...

7.8CVSS0.00157EPSS
Exploits0References7
Rows per page
Query Builder