Lucene search
+L

3369 matches found

PyPA
PyPA
•added 2026/07/13 10:16 p.m.•36 views

PYSEC-2026-3450

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability.The specific flaw exists...

7.5CVSS7.3AI score0.00715EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
•added 2026/07/13 10:16 p.m.•31 views

PYSEC-0000-CVE-2026-15685

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability.The specific flaw exists...

7.5CVSS7.3AI score0.00715EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/07/13 9:30 p.m.•64 views

CVE-2026-15685 Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists...

7.5CVSS0.00715EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/13 9:30 p.m.•83 views

CVE-2026-15685

CVE-2026-15685 affects Ollama, with the vulnerability located in the downloadBlob function where user-supplied data is not properly validated, allowing an out-of-bounds memory access and resulting in a denial-of-service condition. The issue, linked to ZDI-CAN-27277, can be triggered remotely with...

7.5CVSS7.3AI score0.00715EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/13 9:30 p.m.•18 views

CVE-2026-15685 Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists...

7.5CVSS7.3AI score0.00715EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/13 9:30 p.m.•19 views

CVE-2026-15685

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists...

7.5CVSS7.3AI score0.00715EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/07/13 9:30 p.m.•28 views

CVE-2026-15685 Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists...

7.5CVSS6.1AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•6 views

CVE-2026-15685: Improper Validation of Array Index

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists...

7.5CVSS7.3AI score0.00715EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/07/09 11:21 p.m.•15 views

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index in the validation process for BGP UPDATE messages containing an empty ASPATH attribute. An attacker can cause a panic and terminate the peer session by sending a malformed UPDATE with a zero-length...

8.2CVSS5.8AI score0.00412EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/09 11:21 p.m.•13 views

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index in the validation process for BGP UPDATE messages containing an empty ASPATH attribute. An attacker can cause a panic and terminate the peer session by sending a malformed UPDATE with a zero-length...

8.2CVSS5.8AI score0.00412EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/09 11:21 p.m.•7 views

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index in the validation process for BGP UPDATE messages containing an empty ASPATH attribute. An attacker can cause a panic and terminate the peer session by sending a malformed UPDATE with a zero-length...

8.2CVSS5.8AI score0.00412EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/07/09 9:22 a.m.•17 views

CVE-2026-45692

A flaw was found in Caddy, an extensible server platform. A remote administrator with restricted access to specific configuration objects could bypass these limitations. This occurs because the authorization system uses string prefix matching for access paths, while the configuration traversal...

5.4CVSS6AI score0.00241EPSS
SaveExploits1References4
Zero Day Initiative
Zero Day Initiative
•added 2026/07/08 12:00 a.m.•11 views

(0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloadBlob function. The issue results from the lack of proper validation of...

7.5CVSS7.3AI score0.00715EPSS
SaveExploits0
OSV
OSV
•added 2026/07/07 4:52 p.m.•12 views

GO-2026-5743 Remote Admin Authorization Bypass in "/config" API via Array Index Normalization in github.com/caddyserver/caddy

Remote Admin Authorization Bypass in "/config" API via Array Index Normalization in github.com/caddyserver/caddy...

5.4CVSS8.1AI score0.00241EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/02 12:00 a.m.•9 views

CVE-2026-57271: Improper Validation of Array Index

GeoWebPlayer also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud is an addon that can be installed with various GeoVision software GV-VMS, GV-Cloud, .... It creates a websocket server that expands the capabilities of the various web-interfaces provided by the...

8.3CVSS5.8AI score0.00371EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/02 12:00 a.m.•8 views

CVE-2026-57270: Improper Validation of Array Index

GeoWebPlayer also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud is an addon that can be installed with various GeoVision software GV-VMS, GV-Cloud, .... It creates a websocket server that expands the capabilities of the various web-interfaces provided by the...

8.3CVSS5.8AI score0.00371EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/01 6:47 p.m.•12 views

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index in the UnmarshalJSON function when processing attacker-controlled short ciphertexts. An attacker can cause the server to panic and disrupt service by submitting a specially crafted JSON payload with a...

5.3CVSS6AI score
SaveExploits0References2
NVD
NVD
•added 2026/07/01 7:16 a.m.•35 views

CVE-2026-14193

DVP80ES300T with Improper Validation of Array Index Vulnerability...

7.5CVSS0.0046EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/01 5:30 a.m.•68 views

CVE-2026-14193 DVP80ES300T - Improper Validation of Array Index Vulnerability

DVP80ES300T with Improper Validation of Array Index Vulnerability...

7.5CVSS0.0046EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/01 5:30 a.m.•51 views

CVE-2026-14193

The vulnerability CVE-2026-14193 affects the DVP80ES300T device and is described as an Improper Validation of Array Index vulnerability. In the provided data, the CVSS v3.1 base score is 7.5 ( HIGH ), with Network attack vector, no privileges required, no user interaction, and availability impact...

7.5CVSS5.8AI score0.0046EPSS
SaveExploits0References1
Rows per page
Query Builder