490235 matches found
BELL-CVE-2026-68376
Bulletin has no description...
BELL-CVE-2026-68354
Bulletin has no description...
BELL-CVE-2026-68105
Bulletin has no description...
CVE-2026-13613 KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint
The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using them in a SQL query, allowing authenticated users with a clinic staff-level role to perform SQL injection...
CVE-2025-15687 Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service
A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smfgxccacb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may b...
EUVD-2025-210701
A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diamlogfunc of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading...
MINI-QGR6-9GCV-H8FH
Bulletin has no description...
MINI-WJ4R-W273-HFFJ
Bulletin has no description...
MINI-VRWV-797H-3PQQ
Bulletin has no description...
MINI-Q2M8-2VRG-97RJ
Bulletin has no description...
CVE-2026-68442
creationtimestamp| type| source ---|---|--- 2026-08-12 01:13:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fuza67qd5imt3 2026-08-12 23:16:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117085082278939225...
EUVD-2026-56980
The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...
ECHO-4FF8-0678-A958
Bulletin has no description...
ECHO-D0F5-0786-800C
Bulletin has no description...
ECHO-52C1-F769-B858
Bulletin has no description...
ECHO-C0E9-A477-5A84
Bulletin has no description...
PT-2026-78864
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A NULL pointer dereference in the H.245 protocol dissector can lead to a crash, resulting in a denial of service. A protocol dissector is a software...
PT-2026-71256
Budibase is an open-source low-code platform. Prior to 3.39.4, uploadUrl in packages/server/src/utilities/fileUtils.ts used a bare server-side fetch for string attachment values passed by processAttachments in packages/server/src/sdk/workspace/ai/helpers/rows.ts. A builder with the AI...
PT-2026-70979
A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smf gx cca cb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and ma...
WordPress 7.0.0 < 7.0.4
WordPress versions 7.0.0 7.0.4 are affected by one or more vulnerabilities %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from WordPress Security Advisory wordpress-7-0-4-release. include'compat.inc'; if description scriptid334921;...