|
271
|
6.5 |
MEDIUM
Network
|
open5gs
|
open5gs
|
A vulnerability has been found in Open5GS up to 2.7.7. This affects the function smf_n4_build_qos_flow_to_modify_list of the file /src/smf/n4-build.c of the component SMF. Such manipulation leads to …
New
|
CWE-404
Improper Resource Shutdown or Release
|
CVE-2026-8250
|
2026-05-13 02:35 |
2026-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272
|
6.5 |
MEDIUM
Network
|
open5gs
|
open5gs
|
A vulnerability was found in Open5GS up to 2.7.7. This impacts the function update_authorized_pcc_rule_and_qos of the file /src/smf/npcf-handler.c of the component SMF. Performing a manipulation resu…
New
|
CWE-404
Improper Resource Shutdown or Release
|
CVE-2026-8251
|
2026-05-13 02:35 |
2026-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273
|
6.5 |
MEDIUM
Network
|
open5gs
|
open5gs
|
A vulnerability was determined in Open5GS up to 2.7.7. Affected is the function smf_nsmf_handle_create_data_in_hsmf of the component SMF. Executing a manipulation can lead to null pointer dereference…
New
|
CWE-404
CWE-476
Improper Resource Shutdown or Release
NULL Pointer Dereference
|
CVE-2026-8252
|
2026-05-13 02:34 |
2026-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
274
|
9.1 |
CRITICAL
Network
|
vmware
|
spring_cloud_config
|
Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially cra…
Update
|
CWE-22
Path Traversal
|
CVE-2026-40982
|
2026-05-13 02:30 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275
|
8.1 |
HIGH
Network
|
vmware
|
spring_cloud_config
|
The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.
Spring …
Update
|
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
|
CVE-2026-41002
|
2026-05-13 02:29 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276
|
6.2 |
MEDIUM
Local
|
apple
|
ipados
iphone_os
macos
tvos
visionos
watchos
|
A buffer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 2…
New
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-28897
|
2026-05-13 02:27 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
277
|
7.5 |
HIGH
Network
|
apple
|
ipados
iphone_os
macos
visionos
|
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. Processing maliciously crafted web content may lead to an unex…
New
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2026-28944
|
2026-05-13 02:25 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278
|
8.8 |
HIGH
Local
|
apple
|
macos
|
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A malicious app may be able to break out of its sandbox.
New
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2026-28923
|
2026-05-13 02:24 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279
|
7.5 |
HIGH
Network
|
apple
|
macos
|
A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to access Contacts with…
New
|
CWE-362
Race Condition
|
CVE-2026-28924
|
2026-05-13 02:24 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280
|
7.5 |
HIGH
Network
|
apple
|
macos
|
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to cause unexpected system termin…
New
|
CWE-120
Classic Buffer Overflow
|
CVE-2026-28925
|
2026-05-13 02:24 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
