10528 matches found
org.springframework.ai:spring-ai-starter-model-chat-memory-repository-redis (2.0.0) potentially affected by CVE-2026-59319 via org.springframework.ai:spring-ai-model-chat-memory-repository-redis (2.0.0)
org.springframework.ai:spring-ai-model-chat-memory-repository-redis MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ai:spring-ai-model-chat-memory-repository-redis and may be impacted: -...
CVE-2026-51367
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51366
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
PT-2026-78357
Name of the Vulnerable Software and Affected Versions Bottinelli Informatica Vedo Suite version 1.2.5 Description A remote attacker can obtain sensitive information through the 'api vedo/chat' endpoint by manipulating the utente chat parameter. Recommendations At the moment, there is no informati...
CVE-2026-51367
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51366: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51366
A SQL Injection vulnerability exists in Bottinelli Informatica Vedo Suite v.1.2.5 . A remote attacker can exploit this flaw via the api_vedo/chat endpoint using the utente_chat parameter to achieve arbitrary code execution . The vulnerability is characterized by the improper neutralization of spe...
CVE-2026-51367
Bottinelli Informatica Vedo Suite v.1.2.5 is affected by a vulnerability that allows a remote attacker to obtain sensitive information . The issue is reachable via the api_vedo/chat endpoint by manipulating the utente_chat parameter. While the provided documents characterize this as an authorizat...
EUVD-2026-62481
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
PT-2026-78356
Name of the Vulnerable Software and Affected Versions Bottinelli Informatica Vedo Suite version 1.2.5 Description A SQL Injection issue allows a remote attacker to execute arbitrary code. This is possible through the 'api vedo/chat' endpoint by manipulating the utente chat parameter...
CVE-2026-51367: Authorization Bypass Through User-Controlled Key
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51366
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-51367
An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...
CVE-2026-73187
Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...
CVE-2026-66636
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcin Wise Chat wise-chat allows Stored XSS.This issue affects Wise Chat: from n/a through 3.4.3...
EUVD-2026-60938
Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...
CVE-2026-73187 WordPress Sticky Chat Widget plugin <= 1.4.2 - SQL Injection vulnerability
Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...
CVE-2026-73187
The WordPress Sticky Chat Widget plugin (versions ≤ 1.4.2) contains an unauthenticated SQL Injection vulnerability, discovered by Nguyen Ba Khanh of HPT Vietnam Corporation. CVSS 3.1 scores it 9.3 (Critical) for network-exploitable high confidentiality impact. CISA SSVC rates it automatable with ...
