Lucene search
+L

94 matches found

Packet Storm News
Packet Storm News
added 2026/04/10 12:00 a.m.6 views

Personal AI Infrastructure 4.0.3

PAI is a Personalized AI Platform designed to magnify your capabilities. It's designed for humans most of all, but can be used by teams, companies, or Federations of Planets desiring to be better versions of themselves. The goal of the project is to get people working with AI and lower the bar...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/04/01 12:00 a.m.24 views

PT-2026-29571

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.8.11 Description A broken access control issue exists in Open WebUI, specifically in tool values. This allows low-privileged attackers to access sensitive Tool data. Recommendations Update to version 0.8.11 or...

7.7CVSS6.1AI score0.05008EPSS
SaveExploits1References12
NVD
NVD
added 2026/02/25 9:16 p.m.14 views

CVE-2026-0542

ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow Sandbox. ServiceNow addressed this vulnerability by deploying...

9.2CVSS0.00619EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/25 8:35 p.m.43 views

CVE-2026-0542

This CVE affects ServiceNow’s AI platform, where an unauthenticated user could, in certain circumstances, execute code within the ServiceNow Sandbox. The vulnerability is identified as a remote code execution flaw in the ServiceNow AI platform, with products affected including hosted instances an...

9.2CVSS6.6AI score0.00619EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/25 8:35 p.m.32 views

CVE-2026-0542 Remote Code Execution in ServiceNow AI Platform

ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow Sandbox. ServiceNow addressed this vulnerability by deploying...

9.2CVSS0.00619EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/25 8:35 p.m.9 views

CVE-2026-0542

ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow Sandbox. ServiceNow addressed this vulnerability by deploying...

9.2CVSS6.6AI score0.00619EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/25 12:00 a.m.15 views

PT-2026-22008

Name of the Vulnerable Software and Affected Versions ServiceNow affected versions not specified Description A remote code execution issue exists within the ServiceNow AI platform. An unauthenticated user, under specific conditions, could potentially execute code within the ServiceNow Sandbox...

9.2CVSS6.2AI score0.00619EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/02/03 12:00 a.m.23 views

HCL AION 安全漏洞

HCL AION is an AI lifecycle management platform from HCL India. HCL AION suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands on the system...

9.8CVSS6.1AI score0.00583EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/13 10:52 p.m.10 views

CVE-2025-12420

A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform. ServiceNow has addressed this vulnerability by deploying a relevant security update...

10CVSS6.9AI score0.46074EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/13 12:30 a.m.10 views

EUVD-2025-206275

A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform. ServiceNow has addressed this vulnerability by deploying a relevant security update...

10CVSS6.5AI score0.46074EPSS
SaveExploits0References2
NVD
NVD
added 2026/01/12 10:16 p.m.17 views

CVE-2025-12420

A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform. ServiceNow has addressed this vulnerability by deploying a relevant security update...

10CVSS0.46074EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/12 10:16 p.m.10 views

CVE-2025-12420

A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform. ServiceNow has addressed this vulnerability by deploying a relevant security update...

9.8CVSS5.7AI score0.46074EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/12 9:29 p.m.65 views

CVE-2025-12420

ServiceNow CVE-2025-12420 affects the ServiceNow AI Platform, with Now Assist AI Agents and Virtual Agent API components harboring an authentication/authorization flaw that allows an unauthenticated attacker to impersonate any user. Root cause centers on broken access controls and a shared provid...

10CVSS6.6AI score0.46074EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2026/01/12 9:29 p.m.300 views

CVE-2025-12420 Unauthenticated Privilege Escalation in ServiceNow AI Platform

A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform. ServiceNow has addressed this vulnerability by deploying a relevant security update...

10CVSS0.46074EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/12 12:00 a.m.12 views

ServiceNow AI Platform 安全漏洞

ServiceNow AI Platform is an AI intelligence platform from ServiceNow, Inc. in the United States. ServiceNow AI Platform has a security vulnerability that originates from an unauthenticated user being able to impersonate another user and perform actions that they are authorized to perform...

10CVSS7AI score0.46074EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/05 7:25 a.m.15 views

EUVD-2026-0906

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Missing Authorization vulnerability, allowing authenticated remote attackers to modify specific network packet parameters, enabling certain system functions to access other users' files...

7.1CVSS6.4AI score0.0027EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/12/23 12:25 a.m.29 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS6.8AI score0.0028EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/23 12:25 a.m.20 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS6.7AI score0.00296EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/22 9:30 p.m.17 views

EUVD-2025-204736

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS6.3AI score0.0028EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/22 9:30 p.m.11 views

EUVD-2025-204740

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

6.2AI score0.00296EPSS
SaveExploits0References3
Rows per page
Query Builder