|
661
|
5.5 |
MEDIUM
Network
|
jenkins
|
buildgraph-view
|
Jenkins buildgraph-view Plugin 1.8 and earlier does not escape the build URL, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs or views.
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-48927
|
2026-05-29 01:52 |
2026-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
662
|
7.5 |
HIGH
Network
|
free5gc
|
free5gc
|
free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NRF root SBI endpoint POST /oauth2/token contains a parser-level type-confusion bug family. The handler in N…
New
|
CWE-20 CWE-755 CWE-843
Improper Input Validation Improper Handling of Exceptional Conditions Type Confusion
|
CVE-2026-44325
|
2026-05-29 01:51 |
2026-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
663
|
4.3 |
MEDIUM
Network
|
jenkins
|
multijob
|
A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows attackers to resume failed Multijob builds.
New
|
CWE-352
Origin Validation Error
|
CVE-2026-9674
|
2026-05-29 01:51 |
2026-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
664
|
5.4 |
MEDIUM
Network
|
synology
|
contacts
|
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users …
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-13167
|
2026-05-29 01:37 |
2026-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
665
|
9.4 |
CRITICAL
Network
|
free5gc
|
free5gc
|
free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-traffic-influence API without inbound OAuth2/bearer-token authorization. A network attac…
New
|
CWE-862
Missing Authorization
|
CVE-2026-44326
|
2026-05-29 01:25 |
2026-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
666
|
10.0 |
CRITICAL
Network
|
free5gc
|
free5gc
|
free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-oam route group without inbound OAuth2/bearer-token authorization. A network attacker wh…
New
|
CWE-306 CWE-862
Missing Authentication for Critical Function Missing Authorization
|
CVE-2026-44327
|
2026-05-29 01:24 |
2026-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
667
|
8.2 |
HIGH
Network
|
free5gc
|
free5gc
|
free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. On top of that, the DELETE /upi…
New
|
CWE-306 CWE-476 CWE-862
Missing Authentication for Critical Function NULL Pointer Dereference Missing Authorization
|
CVE-2026-44328
|
2026-05-29 01:24 |
2026-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
668
|
10.0 |
CRITICAL
Network
|
free5gc
|
free5gc
|
free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without OAuth2/bearer-token authorization middleware. A network at…
New
|
CWE-306 CWE-862
Missing Authentication for Critical Function Missing Authorization
|
CVE-2026-44329
|
2026-05-29 01:23 |
2026-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
669
|
8.8 |
HIGH
Network
|
-
|
-
|
A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is an unknown function of the file /goform/formPptpClientConfig of the component Web Management Interface. This manipul…
New
|
CWE-119 CWE-121
Incorrect Access of Indexable Resource ('Range Error') Stack-based Buffer Overflow
|
CVE-2026-9628
|
2026-05-29 01:16 |
2026-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
670
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was found in itsourcecode Courier Management System 1.0. The affected element is an unknown function of the file /parcel_list.php. Performing a manipulation of the argument s results …
New
|
CWE-74 CWE-89
Injection SQL Injection
|
CVE-2026-9607
|
2026-05-29 01:16 |
2026-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|