Lucene search
+L

14299 matches found

Snyk
Snyk
•added 2026/06/08 4:08 a.m.•17 views

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the chunker.go process of the Qdrant Backend. An attacker can compromise data integrity or availability by exploiting the use of a weak hash algorithm in remote scenarios with low privileges and high attack complexit...

4.2CVSS5.6AI score0.0016EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/08 4:08 a.m.•15 views

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the chunker.go process of the Qdrant Backend. An attacker can compromise data integrity or availability by exploiting the use of a weak hash algorithm in remote scenarios with low privileges and high attack complexit...

4.2CVSS5.6AI score0.0016EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/08 4:08 a.m.•19 views

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the chunker.go process of the Qdrant Backend. An attacker can compromise data integrity or availability by exploiting the use of a weak hash algorithm in remote scenarios with low privileges and high attack complexit...

4.2CVSS5.6AI score0.0016EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2026/06/08 3:47 a.m.•22 views

GHSA-6H35-9P2W-3J3R grepai Uses a Broken or Risky Cryptographic Algorithm

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS4.4AI score0.0016EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2026/06/08 3:47 a.m.•24 views

grepai Uses a Broken or Risky Cryptographic Algorithm

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS4.4AI score0.0016EPSS
SaveExploits0References9Affected Software1
NVD
NVD
•added 2026/06/08 3:16 a.m.•29 views

CVE-2026-11479

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS0.0016EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/06/08 2:58 a.m.•39 views

CVE-2026-11447

A security flaw has been discovered in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function iwinfobackend of the file iwinfo.so of the component MTK Backend. The manipulation of the argument device results in command injection. The attack can be executed remotely. The exploit has been released...

6.5CVSS6.2AI score0.01073EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/06/08 2:15 a.m.•25 views

CVE-2026-11479 yoanbernabeu grepai Qdrant Backend chunker.go weak hash

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

2.3CVSS4.4AI score0.0016EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/06/08 2:15 a.m.•18 views

CVE-2026-11479 yoanbernabeu grepai Qdrant Backend chunker.go weak hash

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS4.4AI score0.0016EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/06/08 2:15 a.m.•22 views

CVE-2026-11479

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS4.4AI score0.0016EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2026/06/08 2:15 a.m.•72 views

CVE-2026-11479 yoanbernabeu grepai Qdrant Backend chunker.go weak hash

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS0.0016EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/06/08 2:15 a.m.•40 views

EUVD-2026-35010

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS4.4AI score0.0016EPSS
SaveExploits0References7
CVE
CVE
•added 2026/06/08 2:15 a.m.•99 views

CVE-2026-11479

CVE-2026-11479 affects yoanbernabeu grepai 0.35.0, specifically the Qdrant Backend component’s file indexer/chunker.go. The issue involves manipulation that leads to use of a weak hash, enabling a remote attack. Exploitation is described as difficult, with network attack vector and low privileges...

4.2CVSS4.4AI score0.0016EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/06/08 12:00 a.m.•28 views

PT-2026-47570

Summary The TDengine DAQ storage connector's escapeTdString at server/runtime/storage/tdengine/index.js:10 doubles single quotes but does not escape backslashes. TDengine's SQL parser treats ' as a literal single quote inside a string, so a tag id of the form x' OR 1=1-- escapes the first single...

5.3CVSS5.5AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/08 12:00 a.m.•59 views

PT-2026-47446

Name of the Vulnerable Software and Affected Versions Nginx Proxy Manager versions 2.9.14 through 2.15.1 Description An authenticated remote code execution issue exists via OS command injection in the setupCertbotPlugins function located in backend/setup.js. Attackers with certificates:manage...

7.7CVSS6.7AI score0.01662EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/06/08 12:00 a.m.•27 views

PT-2026-47595

It was discovered that poppler incorrectly handled certain malformed PDF tiling patterns in the Splash backend. An attacker could possibly use this issue to execute arbitrary code, obtain sensitive information, or cause a denial of service...

7.8CVSS7.8AI score0.00252EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/08 12:00 a.m.•33 views

grepai encryption vulnerability

grepai is a semantic search-based code understanding tool developed by Yoan Bernabeu. Version 0.35.0 of grepai has an encryption vulnerability. This vulnerability stems from improper handling of files in the Qdrant backend component’s file indexer/chunker.go file, which may lead to the use of wea...

4.2CVSS5.5AI score0.0016EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/08 12:00 a.m.•26 views

Apache HTTP Server security vulnerabilities

Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server is known for its speed, reliability, and ability to be expanded through simple APIs. There were security vulnerabilities in Apache HTTP Server versions 2.4.0 to 2.4.67. These...

7.5CVSS7.4AI score0.0121EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•5 views

CVE-2026-34356: Heap-based Buffer Overflow

Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...

7.5CVSS7.2AI score0.0121EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•6 views

CVE-2026-34355: Heap-based Buffer Overflow

A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

7.5CVSS7.5AI score0.01161EPSS
SaveExploits0References4
Rows per page
Query Builder