Unspecified vulnerability in Open5GS amf_ue_set_suci function

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in the Open5GS amfuesetsuci function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted NGAP packet...

Orangescrum cross-site scripting vulnerability (CNVD-2026-02679)

Orangescrum is a project and task management software tool that also provides productivity tools for work organization and team collaboration. Orangescrum suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied...

Open5GS Denial of Service Vulnerability (CNVD-2025-03141)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which can be exploited to cause a denial of service by an attacker who sends a "Switch Request ACK" message missing th...

Logic flaw vulnerability in H5S video platform of ZeroVision Technology (Shanghai) Co.

ZeroVision Technology Shanghai Co., Ltd. is an enterprise mainly engaged in software and information technology service industry. ZeroVision Technologies Shanghai Ltd. H5S video platform has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information and create...

Mattermost Denial of Service Vulnerability (CNVD-2025-11091)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a denial-of-service vulnerability that can be exploited by attackers to cause a system crash...

Open5GS has an unspecified vulnerability (CNVD-2025-03161)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a security vulnerability that can be exploited by an attacker to send an "E-RAB Setup Response" message that lacks the required mmeues1apid' field to...

Open5GS Denial of Service Vulnerability (CNVD-2025-03134)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which can be exploited to cause a denial of service by an attacker who sends an "ENB Status Transmission" message...

Mattermost Denial of Service Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a denial-of-service vulnerability that stems from an inability to properly validate post attributes, which can be exploited by an attacker to cause a system crash...

Mattermost Code Issue Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a code issue vulnerability that stems from a failure to properly validate a proto style provided to an action style, which can be exploited by an attacker to crash the front-end...

Open5GS Denial of Service Vulnerability (CNVD-2025-03148)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS, which can be exploited to cause a denial of service by an attacker who would send an initial UE message'' message that lacks th...

Open5GS Denial of Service Vulnerability (CNVD-2025-03192)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which can be exploited to cause a denial of service by sending a "switch" message missing the required "MMEUES1APID"...

Open5GS Denial of Service Vulnerability (CNVD-2025-03199)

Open5GS is Open5GS open source an open source implementation of 5G Core and Epc in C, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS, which can be exploited by an attacker to send a "UE Functional Information Indication" message missing the required mmeues1apid...

Open5GS Denial of Service Vulnerability (CNVD-2025-03193)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS, which can be exploited to cause a denial of service by an attacker who sends "S1SETUP request" messages missing the required...

Unspecified vulnerability in Open5GS oai_nas_5gmm_decode function

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in the Open5GS oainas5gmmdecode function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted NGAP packe...

Open5GS has an unspecified vulnerability

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS version 2.6.4 and earlier versions, which can be exploited by an attacker to send an "E-rab modification instruction" message th...

Open5GS mme_ue_find_by_imsi function denial of service vulnerability

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial-of-service vulnerability exists in Open5GS 2.6.4 and earlier versions, which stems from a reachable assertion in the mmeuefindbyimsi function, and can be exploite...

Open5GS Denial of Service Vulnerability (CNVD-2025-03197)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS, which can be exploited by an attacker to send a "UE Context Version" full message missing the required mmeues1apid' field to...

Hospital Management System index.php File Cross-Site Scripting Vulnerability

Hospital Management System a PHP and MySQL based hospital management system. Hospital Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the Email parameter of /doctor/index.php, which can be...

Open5GS Denial of Service Vulnerability (CNVD-2025-03198)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a security vulnerability that can be exploited by an attacker to repeatedly send such oversized packets to cause the ogssctprecvmsg routine to reach a...

Open5GS has an unspecified vulnerability (CNVD-2025-03190)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in Open5GS, which can be exploited to cause a denial of service by an attacker who sends an "Initial Context Setup Response" message that...

IBM Maximo Application Suite Input Validation Error Vulnerability

IBM Maximo Application Suite is a single platform for intelligent asset management, monitoring, maintenance, computer vision, security and reliability from International Business Machines IBM. IBM Maximo Application Suite has an input validation error vulnerability that stems from not neutralizin...

IBM Common Licensing Information Disclosure Vulnerability

IBM Common Licensing is a license management solution from International Business Machines IBM. IBM Common Licensing suffers from an information disclosure vulnerability that stems from storing user credentials in plain plaintext, which can be exploited by an attacker to cause them to be readable...

IBM Maximo Application Suite Cross-Site Scripting Vulnerability (CNVD-2025-02820)

IBM Maximo Application Suite is a single platform for intelligent asset management, monitoring, maintenance, computer vision, security and reliability from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Maximo Application Suite version 9.0.0. The...

coolLabs Coolify Command Execution Vulnerability

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. A command execution vulnerability exists in coolLabs Coolify, which can be exploited by an attacker to execute arbitrary commands on a system...

IBM Maximo Application Suite Information Disclosure Vulnerability

IBM Maximo Application Suite is a single platform for intelligent asset management, monitoring, maintenance, computer vision, security and reliability from International Business Machines IBM. An information disclosure vulnerability exists in IBM Maximo Application Suite that stems from allowing...

IBM Cloud Pak System Path Traversal Vulnerability

IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from International Business Machines IBM. The product supports deploying, managing and moving application environments across hybrid clouds. A path traversal vulnerability exists in IBM Cloud...

IBM Cognos Mobile Client Trust Management Issue Vulnerability

IBM Cognos Mobile Client is a mobile application for the IBM Cognos BI platform from International Business Machines IBM. IBM Cognos Mobile Client suffers from a trust management issue vulnerability that stems from a lack of certificate fixing, which can be exploited by an attacker to cause...

Arbitrary File Read Vulnerability in Unisys UOS System of Unisys Software Technology Co.

Unisys Software Technology Co., Ltd. is a company specializing in operating system R&D and services, and is committed to providing safe, reliable, beautiful and easy-to-use domestic operating system solutions. There is an arbitrary file reading vulnerability in Unisys UOS system, which can be...

Apache Wicket Resource Management Error Vulnerability

Apache Wicket is the United States Apache Apache Foundation of a set of open source , lightweight , component-based framework , which provides an object-oriented way to develop Web-based dynamic UI applications . A resource management error vulnerability exists in Apache Wicket version 7.0.0. The...

IBM Analytics Content Hub Buffer Overflow Vulnerability

The IBM Analytics Content Hub is a clean streaming experience from International Business Machines IBM that visualizes relevant analytics content by extracting content from IBM and other analytics providers. IBM Analytics Content Hub suffers from a buffer overflow vulnerability that stems from...

Unspecified Vulnerability in coolLabs Coolify

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. An unspecified vulnerability exists in coolLabs Coolify that originates from an authenticated user retrieving any existing private key on an instance in plain text. No detailed vulnerability details are provided at th...

coolLabs Coolify Information Disclosure Vulnerability

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. coolLabs Coolify suffers from an information disclosure vulnerability that can be exploited by an attacker to gain access to the global instance OAuth configuration...

coolLabs Coolify Denial of Service Vulnerability

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. coolLabs Coolify suffers from a denial of service vulnerability that stems from the fact that any authenticated user can revoke any team invitation on an instance by simply providing a predictable incremental ID, whic...

coolLabs Coolify Elevation of Privilege Vulnerability

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. A elevation of privilege vulnerability exists in coolLabs Coolify, which is caused by improper authorization validation of terminal functions. An attacker can exploit the vulnerability to gain elevated privileges and...

coolLabs Coolify Cross-Site Scripting Vulnerability

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. coolLabs Coolify suffers from a cross-site scripting vulnerability that stems from allowing a user to search for tags on a tabbed page, and if the search does not return any results, the query is reflected in an error...

IBM Planning Analytics File Upload Vulnerability

IBM Planning Analytics is a suite of business planning analytics solutions from International Business Machines IBM. The solution supports automated execution of processes such as business planning, budgeting and analysis. A file upload vulnerability exists in IBM Planning Analytics that stems fr...

coolLabs Coolify Information Disclosure Vulnerability (CNVD-2025-19124)

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. coolLabs Coolify suffers from an information disclosure vulnerability that stems from the fact that any authenticated user only needs to know the UUID of the model, which can be exploited by an attacker to obtain the...

coolLabs Coolify Command Injection Vulnerability

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. A command injection vulnerability exists in coolLabs Coolify that stems from a failure to properly filter constructed command special characters, commands, etc. when changing the name of a project when creating or...

Unspecified Vulnerability in LunaSVG (CNVD-2025-04485)

LunaSVG is a standalone C SVG rendering library. A security vulnerability exists in LunaSVG, which stems from the inclusion of a segmentation violation found via the component compositionsourceover. No detailed vulnerability details are provided at this time...

Unspecified Vulnerability in LunaSVG (CNVD-2025-04486)

LunaSVG is a standalone C SVG rendering library. A security vulnerability exists in LunaSVG that stems from a containment segmentation violation found via the component plutovgpathaddpath. No detailed vulnerability details are provided at this time...

Unspecified Vulnerability in LunaSVG (CNVD-2025-04484)

LunaSVG is a standalone C SVG rendering library. A security vulnerability exists in LunaSVG that stems from the inclusion of a segmentation violation found via the component grayrecordcell. No detailed vulnerability details are provided at this time...

Unspecified Vulnerability in LunaSVG (CNVD-2025-04483)

LunaSVG is a standalone C SVG rendering library. A security vulnerability exists in LunaSVG that stems from the component blendtransformedtiledargb.isra.0 containing a segmentation violation. No detailed vulnerability details are provided at this time...

OpenImageIO Heap Overflow Vulnerability

OpenImageIO is OpenImageIO open source an image processing library . With an easy to use interface and a large number of supported image formats. A heap overflow vulnerability exists in OpenImageIO that stems from a boundary error in the component OpenImageIOV310 :: farmhash :: Inlined ::...

Unspecified vulnerability in LunaSVG (CNVD-2025-04482)

LunaSVG is a standalone C SVG rendering library. A security vulnerability exists in LunaSVG that stems from the discovery of a containment allocation size oversize error via the component plutovgsurfacecreate. No detailed vulnerability details are provided at this time...

Centreon SQL Injection Vulnerability (CNVD-2025-03203)

Centreon is a set of open source system monitoring tools from France's Centreon. The product mainly provides monitoring functions for resources such as network, system and application programs. An SQL injection vulnerability exists in Centreon centreon-web, which stems from the application's lack...

OpenImageIO Buffer Overflow Vulnerability

OpenImageIO is OpenImageIO open source an image processing library . With an easy to use interface and a large number of supported image formats. OpenImageIO suffers from a buffer overflow vulnerability that stems from a boundary error in the component /OpenImageIO/fmath.h when processing untrust...

OpenImageIO Code Issue Vulnerability

OpenImageIO is OpenImageIO open source an image processing library . With an easy to use interface and a large number of supported image formats. A code issue vulnerability exists in OpenImageIO that stems from a boundary error in the component /OpenImageIO/stringview.h when processing untrusted...

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2025-02824)

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting...

coolLabs Coolify Remote Command Execution Vulnerability

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. coolLabs Coolify suffers from a remote command execution vulnerability that can be exploited by an attacker to execute arbitrary commands on a victim's server...

IBM Cloud Pak System Information Disclosure Vulnerability (CNVD-2025-02817)

IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from International Business Machines IBM. The product supports deploying, managing and moving application environments across hybrid clouds. An information disclosure vulnerability exists in...