free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure
CVE-2026-53551
### Summary The free5GC AUSF (Authentication Server Function) does not validate the `supiOrSuci` field in UE authentica
#cwe-20
共收录 1723 条相关情报。
← 返回所有主题Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution(<matrix>, <columns>, <should_normalize>) filter passes the user-con...
CVE-2026-53503
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution(, , ) filt
Thumbor convolution filter allows divide-by-zero in C extension leading to remote DoS
CVE-2026-53503
### Summary Thumbor's `filters:convolution(, , )` filter passes the user-controlled `` value to a C extension (`thumbor/
Thumbor convolution filter allows divide-by-zero in C extension leading to remote DoS
CVE-2026-53503
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution(, , ) filt
HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to...
CVE-2025-62347
HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and
Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests
CVE-2026-65834
### Summary `CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex` and `ForbiddenAnnotations.Regex` are never v
Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service
CVE-2026-52856
### Summary A maliciously crafted packet received & parsed during the SFTP connection handshake will cause a Go panic.
HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and potential security bypasses. This was caused by an imple...
CVE-2025-62347
HCL iControl was affected by Improper Input Validation vulnerability. It is vulnerable to unexpected system behavior and
A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handles SAML authenticat...
CVE-2026-18217
A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client conf...
CVE-2026-18211
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is respo
A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management services. The issue occurs when a realm administrator uses a wildc...
CVE-2026-18206
A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management services.
Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and CapsuleConfiguration.Spec...
CVE-2026-65834
Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMet
Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests
CVE-2026-65834
Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMet
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72...
CVE-2026-18009
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacke
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72...
CVE-2026-18014
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker
Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72...
CVE-2026-18002
Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attac
Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72...
CVE-2026-17988
Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attack
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72...
CVE-2026-17970
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed an attacker in a
Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72...
CVE-2026-17990
Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker
Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922...
CVE-2026-17987
Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote att