Read the docs

backstage

Records663All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical58CVSS 9.0–10.0
CVSS high242CVSS 7.0–8.9

Exploited now

backstage records in CISA KEV
TI-2026-33119 TanStack Unspecified Vulnerability Priority CRITICAL 100KEV 2026-05-27TI-2018-10499 Linux Kernel Integer Overflow Vulnerability Priority CRITICAL 93KEV 2026-01-26

Components

Products in the NVD configurations · select one to filter the records
Yocto 114 records MEDIUM Backstage 53 records MEDIUM Nats-server 36 records HIGH Pytorch 31 records HIGH Everest 29 records HIGH Harbor 24 records MEDIUM Containerd 22 records HIGH Magma 22 records MEDIUM

Records

22 records in Magma · all components

TI-2023-18760 CVE-2023-37026 · GHSA-hpf6-962w-3g93

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma…

Priority MEDIUM 62

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00264 Published 2025-01-21 No fix listed CWE-476
TI-2023-18759 CVE-2023-37025 · GHSA-jpwc-c28p-36cc

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma…

Priority MEDIUM 62

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00397 Published 2025-01-21 No fix listed CWE-476
TI-2024-16116 CVE-2024-24421 · GHSA-2gcq-cww3-j4hr

A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9…

Priority MEDIUM 51

A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a cr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00971 Published 2025-01-21 No fix listed CWE-94
TI-2024-16118 CVE-2024-24423 · GHSA-27h7-5545-9242

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit…

Priority MEDIUM 40

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_esm_message_container function at /nas/ies/EsmMessageContainer…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00622 Published 2025-01-21 No fix listed CWE-787
TI-2024-16117 CVE-2024-24422 · GHSA-3mqp-g9h4-rcqw

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit…

Priority MEDIUM 40

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a stack overflow in the decode_protocol_configuration_options function at /3gpp/3gpp_24.008_sm…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00622 Published 2025-01-21 No fix listed CWE-787
TI-2024-16114 CVE-2024-24419 · GHSA-5p7x-8mc5-2v59

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit…

Priority MEDIUM 40

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_traffic_flow_template_packet_filter function at /3gpp/3gpp_24.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00622 Published 2025-01-21 No fix listed CWE-120
TI-2024-16113 CVE-2024-24418 · GHSA-hgmm-hq8f-f7pc

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit…

Priority MEDIUM 40

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_pdn_address function at /nas/ies/PdnAddress.cpp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00622 Published 2025-01-21 No fix listed CWE-120
TI-2024-16112 CVE-2024-24417 · GHSA-222x-q267-pmwg

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit…

Priority MEDIUM 40

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_protocol_configuration_options function at /3gpp/3gpp_24.008_s…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00622 Published 2025-01-21 No fix listed CWE-120
TI-2024-16111 CVE-2024-24416 · GHSA-8x7c-w8p2-82h5

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit…

Priority MEDIUM 40

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_access_point_name_ie function at /3gpp/3gpp_24.008_sm_ies.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00622 Published 2025-01-21 No fix listed CWE-120
TI-2023-18766 CVE-2023-37032 · GHSA-x9mf-2j92-52jm

A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <=…

Priority MEDIUM 40

A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthentica…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00806 Published 2025-01-21 No fix listed CWE-78
TI-2023-18758 CVE-2023-37024 · GHSA-9rmr-pw3x-x887

A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0…

Priority MEDIUM 40

A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cell…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00757 Published 2025-01-21 No fix listed CWE-617
TI-2023-18772 CVE-2023-37038 · GHSA-9wwx-4j35-8876

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma…

Priority LOW 29

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00397 Published 2025-01-21 No fix listed CWE-476
TI-2023-18771 CVE-2023-37037 · GHSA-3gcr-cppr-2cjh

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma…

Priority LOW 29

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00397 Published 2025-01-21 No fix listed CWE-476
TI-2023-18770 CVE-2023-37036 · GHSA-59g5-45q9-9v67

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma…

Priority LOW 29

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00397 Published 2025-01-21 No fix listed CWE-476
TI-2023-18768 CVE-2023-37034 · GHSA-j4xx-w4mr-c7vc

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma…

Priority LOW 29

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00397 Published 2025-01-21 No fix listed CWE-476
TI-2023-18767 CVE-2023-37033 · GHSA-4cxp-jj37-cmrx

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma…

Priority LOW 29

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00397 Published 2025-01-21 No fix listed CWE-476
TI-2023-18765 CVE-2023-37031 · GHSA-j92h-w8rg-jg65

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma…

Priority LOW 29

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00397 Published 2025-01-21 No fix listed CWE-476
TI-2023-18764 CVE-2023-37030 · GHSA-wc5c-cp88-2x6q

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma…

Priority LOW 29

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00397 Published 2025-01-21 No fix listed CWE-476
TI-2023-18762 CVE-2023-37028 · GHSA-cjg3-5236-549r

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma…

Priority LOW 29

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00421 Published 2025-01-21 No fix listed CWE-476
TI-2023-18761 CVE-2023-37027 · GHSA-jj8f-p8pv-qqm3

Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <=…

Priority LOW 29

Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1A…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00396 Published 2025-01-21 No fix listed CWE-476
Open these records in search →