Lucene search
+L

86899 matches found

Cvelist
Cvelist
added 2026/05/18 1:45 a.m.62 views

CVE-2026-8781 omec-project amf handler.go RANConfiguration null pointer dereference

A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploit has been released to the public and ma...

5.3CVSS0.00303EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/05/18 1:45 a.m.18 views

CVE-2026-8781

A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploit has been released to the public and ma...

5.3CVSS5.5AI score0.00303EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/05/18 12:00 a.m.20 views

PT-2026-41629

Name of the Vulnerable Software and Affected Versions omec-project amf versions prior to 2.2.0 Description A flaw in the RANConfiguration function within the ngap/handler.go file allows for a remote null pointer dereference, which occurs when a program attempts to read or write to a memory locati...

5.3CVSS5.9AI score0.00303EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/05/18 12:00 a.m.18 views

amf 安全漏洞

AMF is an open-source library under the Apache License, developed by Free5GC. Versions of AMF such as 2.1.3-dev and earlier contain security vulnerabilities. These vulnerabilities stem from the operation of the function UERadioCapabilityCheckResponse in the file ngap/dispatcher.go, which leads to...

5.3CVSS5.8AI score0.00398EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2026/05/18 12:00 a.m.19 views

Apple Security Advisory 05-11-2026-9

Apple Security Advisory 05-11-2026-9 - tvOS 26.5 addresses buffer overflow, denial of service, information leakage, null pointer, out of bounds access, out of bounds read, out of bounds write, and use-after-free vulnerabilities...

8.8CVSS6.9AI score0.01385EPSS
SaveExploits6
Packet Storm News
Packet Storm News
added 2026/05/18 12:00 a.m.55 views

Apple Security Advisory 05-11-2026-1

Apple Security Advisory 05-11-2026-1 - iOS 26.5 and iPadOS 26.5 addresses buffer overflow, bypass, denial of service, information leakage, null pointer, out of bounds access, out of bounds read, out of bounds write, and use-after-free vulnerabilities...

8.8CVSS6.9AI score0.01385EPSS
SaveExploits6
Oracle linux
Oracle linux
added 2026/05/18 12:00 a.m.20 views

libpng security update

2:1.6.40-8.4 - fix CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE RHEL-161324...

7.5CVSS6.2AI score0.01052EPSS
SaveExploits1
Packet Storm News
Packet Storm News
added 2026/05/18 12:00 a.m.60 views

Apple Security Advisory 05-11-2026-6

Apple Security Advisory 05-11-2026-6 - macOS Tahoe 26.5 addresses buffer overflow, bypass, code execution, denial of service, information leakage, integer overflow, null pointer, out of bounds access, out of bounds read, out of bounds write, and use-after-free vulnerabilities...

8.8CVSS6.9AI score0.07112EPSS
SaveExploits6
Tenable Nessus
Tenable Nessus
added 2026/05/18 12:00 a.m.13 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-021474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021474 advisory. In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, when a SOAP server has a typemap configured, the decoding process...

7.5CVSS5.8AI score0.0078EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/05/18 12:00 a.m.10 views

Vulnerability of the Audio/Video component: The playback feature in Mozilla Firefox browsers and the Thunderbird email client allows attackers to compromise the accessibility of protected information.

The vulnerability of the Audio/Video component: The playback functions of Mozilla Firefox browsers and the Thunderbird email client are related to the handling of a zero pointer. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

5.3CVSS5.8AI score0.00256EPSS
SaveExploits0References7Affected Software3
CNNVD
CNNVD
added 2026/05/18 12:00 a.m.21 views

amf 安全漏洞

AMF is an open-source library under the Apache License, developed by Free5GC. Versions of AMF such as 2.1.3-dev and earlier contain security vulnerabilities. These vulnerabilities stem from the operation of the RANConfiguration function in the file ngap/handler.go, which allows null pointer...

5.3CVSS5.8AI score0.00303EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/18 12:00 a.m.26 views

PT-2026-41630

Name of the Vulnerable Software and Affected Versions omec-project amf versions prior to 2.2.0 Description A weakness in the NGAP Message Handler component, specifically within the ngap/handler.go file, allows for a null pointer dereference a situation where the software attempts to read a memory...

5.3CVSS5.8AI score0.00303EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/05/18 12:00 a.m.10 views

The vulnerability of the RTSP protocol analyzer and the traffic analysis tool for computer networks by Wireshark allows attackers to cause service interruptions.

The vulnerability of the RTSP protocol analyzer and the network traffic analyzer in Wireshark is related to pointer manipulation. Exploiting this vulnerability can allow a hacker to cause a service failure...

5.5CVSS6AI score0.00124EPSS
SaveExploits1References8Affected Software3
Oracle linux
Oracle linux
added 2026/05/18 12:00 a.m.19 views

libpng security update

2:1.6.37-12.4 - fix CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE RHEL-161436...

7.5CVSS6.2AI score0.01052EPSS
SaveExploits1
CNNVD
CNNVD
added 2026/05/18 12:00 a.m.23 views

amf 安全漏洞

AMF is an open-source library under the Apache License, developed by Free5GC. Versions of AMF such as 2.1.3-dev and earlier contain security vulnerabilities. These vulnerabilities stem from unknown functions in the NGAP Message Handler component, specifically in the file ngap/handler.go, which...

5.3CVSS5.8AI score0.00303EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/18 12:00 a.m.10 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-021467)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021467 advisory. In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, a mismatch between encoding lists in Oniguruma and mbfl leads toa...

6.5CVSS5.8AI score0.00202EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/17 3:22 p.m.11 views

SUSE-SU-2026:1904-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache bsc1264013. - CVE-2026-46300: net: skbuff: propagate shared-frag marker...

8.8CVSS6.1AI score0.93235EPSS
SaveExploits49References9
Snyk
Snyk
added 2026/05/17 1:28 a.m.12 views

NULL Pointer Dereference

Overview org.webjars.npm:qs is a querystring parser that supports nesting and arrays, with a depth limit. Affected versions of this package are vulnerable to NULL Pointer Dereference in the stringify function, when processing arrays with the options arrayFormat: 'comma' and encodeValuesOnly: true...

6.9CVSS5.9AI score0.00358EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/17 1:28 a.m.44 views

NULL Pointer Dereference

Overview qs is a querystring parser that supports nesting and arrays, with a depth limit. Affected versions of this package are vulnerable to NULL Pointer Dereference in the stringify function, when processing arrays with the options arrayFormat: 'comma' and encodeValuesOnly: true that contain nu...

6.9CVSS5.9AI score0.00358EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/17 12:00 a.m.44 views

PT-2026-41583

Name of the Vulnerable Software and Affected Versions Crypt::OpenSSL::PKCS12 versions prior to 1.95 Description The software truncates passwords containing embedded NULL characters. In the PKCS12.xs file, password parameters are declared as char , which utilizes Perl's default typemap SvPV nolen,...

9.8CVSS5.8AI score0.00447EPSS
SaveExploits0References9
Rows per page
Query Builder