|
5841
|
- |
|
-
|
-
|
Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling.
In 'Elixir.Phoenix.Trans…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2026-32689
|
2026-05-6 01:16 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5842
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file…
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2025-70067
|
2026-05-6 01:16 |
2026-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5843
|
4.9 |
MEDIUM
Network
|
sonicwall
|
sonicos
|
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-0206
|
2026-05-6 01:12 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5844
|
6.8 |
MEDIUM
Adjacent
|
sonicwall
|
sonicos
|
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
|
CWE-35
Path Traversal: '.../...//'
|
CVE-2026-0205
|
2026-05-6 01:12 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5845
|
8.0 |
HIGH
Adjacent
|
sonicwall
|
sonicos
|
A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.
|
CWE-306
CWE-1390
Missing Authentication for Critical Function
Weak Authentication
|
CVE-2026-0204
|
2026-05-6 01:11 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5846
|
5.5 |
MEDIUM
Local
|
wireshark
|
wireshark
|
IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-6525
|
2026-05-6 00:42 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5847
|
7.8 |
HIGH
Local
|
entechtaiwan
|
tvicport
|
An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x80002008 requests.
|
CWE-20
CWE-269
Improper Input Validation
Improper Privilege Management
|
CVE-2026-30769
|
2026-05-5 23:31 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5848
|
4.3 |
MEDIUM
Network
|
jenkins
|
azure_ad
|
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.
|
CWE-601
Open Redirect
|
CVE-2026-42525
|
2026-05-5 23:25 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5849
|
8.8 |
HIGH
Network
|
agilonhealth
|
minerva
|
An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, could allow an authenticated user with user modification privileges to escalate their …
|
CWE-285
Improper Authorization
|
CVE-2026-5781
|
2026-05-5 23:24 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
5850
|
8.1 |
HIGH
Network
|
agilonhealth
|
minerva
|
An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/minerva/moUser/show/'. If this vulnerability is successfully exploited, an authentic…
|
CWE-284
Improper Access Control
|
CVE-2026-5780
|
2026-05-5 23:22 |
2026-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
