Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
4.3 MEDIUM
CVE-2026-14623 — omec-project amf NGAP Message RRCInactiveTransitionReport denial of service

A vulnerability was determined in omec-project amf up to 2.1.1. This issue affects the function RRCInactiveTransitionReport of the component NGAP Message Handler. Executing a manipulation can lead to…

amf | Remote
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
7.5 HIGH
CVE-2026-14622 — jairiidriss restaurant-website-php-mysql AJAX Endpoint ajax_files missing authentication

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajax_files of the comp…

Remote
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
3.1 LOW
CVE-2026-14621 — FederatedAI FATE OSX Broker QueuePushReqStreamObserver.java QueuePushReqStreamObserver.in…

A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.initEggroll of the file java/osx/osx-broker/src/main/java/org/fedai/osx/broker/grp…

Remote
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
6.5 MEDIUM
CVE-2026-14619 — itsourcecode Hospital Management System medicine.php sql injection

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /medicine.php. This manipulation of the argument editid causes s…

Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
2.3 LOW
CVE-2026-12194 — PHPIPAM Authenticated LFI

PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's file system. The API is …

Remote
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
4.3 MEDIUM
CVE-2026-14618 — Open5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover denial of service

A vulnerability was detected in Open5GS up to 2.7.7. Affected by this vulnerability is the function amf_nnrf_handle_nf_discover of the file src/amf/nnrf-handler.c of the component AMF. The manipulati…

Remote | Denial of Service
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
7.8 HIGH
CVE-2026-12252 — Untrusted JAR Code Execution in Multiple Stanford Interface Classes in nltk/nltk

In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulne…

| Misconfiguration
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
8.8 HIGH
CVE-2025-71380 — n8n - Arbitrary Command Execution via Execute Command Node

The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials can exploit this node…

Remote | Authentication
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
8.1 HIGH
CVE-2025-71375 — picklescan - Undetected Remote Code Execution via _operator.methodcaller

picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can craft malicious pickle payloads using _operator.meth…

Remote | Injection
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
8.1 HIGH
CVE-2025-71373 — picklescan - Remote Code Execution via operator.methodcaller Detection Bypass

picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers to bypass security checks. Remote attackers can craft malicious pickle payloads using…

Remote | Injection
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
8.1 HIGH
CVE-2025-71372 — Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that…

Remote | Supply Chain
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
8.1 HIGH
CVE-2025-71369 — picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichan…

picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapipes.utils.decoder.basichandlers in reduce methods, allowing attackers to bypass safety checks. Remote a…

Remote | Injection
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
8.1 HIGH
CVE-2025-71367 — picklescan - Remote Code Execution via _operator.attrgetter Detection Bypass

picklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloads, allowing attackers to bypass security checks. Remote attackers can craft malicious pickle files using …

Remote | Injection
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
8.1 HIGH
CVE-2025-71366 — picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile

picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile function calls in pickle files, allowing attackers to bypass safety checks. Remote attackers can embed …

Remote | Injection
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
8.1 HIGH
CVE-2025-71364 — picklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessT…

picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in pickle reduce methods, allowing remote code execution. Attackers can craft malicious pickl…

Remote | Injection
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
8.1 HIGH
CVE-2025-71362 — picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortr…

picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes…

Remote | Injection
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
8.1 HIGH
CVE-2025-71360 — picklescan - Remote Code Execution via Undetected idlelib.calltip.get_entity

picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity function in reduce methods. Attackers can embed undetected code in pickle files that executes remote c…

Remote | Injection
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
8.1 HIGH
CVE-2025-71359 — picklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loads

picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.grammar.Grammar.loads in the reduce method, allowing remote code execution. Attackers can craft pickle fi…

Remote | Injection
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
8.1 HIGH
CVE-2025-71356 — picklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic_shapes.ShapeEnv.…

picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression function calls in pickle files. Attackers can embed undetected code in pic…

Remote | Injection
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
8.1 HIGH
CVE-2025-71353 — picklescan - Remote Code Execution via torch._dynamo.guards.GuardBuilder.get

picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.GuardBuilder.get function in reduce methods. Attackers can craft pickle files with embedded code that…

Remote | Injection
Jul 04, 2026 Jul 04, 2026
Jul 04, 2026
Jul 04, 2026
Showing 20 of 7891 Results