13 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-45084
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in the presence...
CVE-2026-67856
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via crafted CreateSubscription, CreateMonitoredItemsSampling, Publish, TransferSubscriptions, and DeleteSubscriptions requests...
CVE-2026-45084
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in the presence module. When the presence module's handlepublish function processes a SIP PUBLISH request with an Event: presence header and a message body...
UBUNTU-CVE-2026-45084
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in the presence module. When the presence module's handlepublish function processes a SIP PUBLISH request with an Event: presence header and a message body...
EUVD-2026-52933
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in the presence module. When the presence module's handlepublish function processes a SIP PUBLISH request with an Event: presence header and a message body...
CVE-2026-45084 OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type state
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in the presence module. When the presence module's handlepublish function processes a SIP PUBLISH request with an Event: presence header and a message body...
CVE-2026-45084
OpenSIPS vulnerability CVE-2026-45084 affects versions 3.4.0–3.6.5 in the presence module. When processing a SIP PUBLISH with Event: presence and a body, if enable_sphere_check=1 is set, handle_publish() calls get_content_type() before parse_content_type_hdr(), dereferencing msg->content_type-...
CVE-2026-45084
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in the presence module. When the presence module's handlepublish function processes a SIP PUBLISH request with an Event: presence header and a message body...
PT-2026-67865
Name of the Vulnerable Software and Affected Versions OpenSIPS versions 3.4.0 through 3.6.5 Description A denial of service issue exists in the presence module of this Session Initiation Protocol SIP server. When the handle publish function processes a SIP PUBLISH request containing an Event:...
CVE-2026-47276 NULL Pointer Dereference in REST API properties_parse via Malformed user_properties
In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in propertiesparse allows an authenticated attacker to crash the NanoMQ broker by sending a POST request to /api/v4/mqtt/publish with userproperties as a JSON array instead of a JSON object. The crash occurs because strlen is call...
EUVD-2025-122352
Malicious code in sadr-orbit-publish-request npm...
Netgear DGN2200 dnslookup.cgi Command Injection Vulnerability
The NETGEAR DGN2200 is an ADSL router device. A command injection vulnerability exists in Netgear DGN2200 dnslookup.cgi. This module allows attackers to exploit the vulnerability to inject arbitrary commands by sending a specially crafted publish request with valid login details...
