Lucene search
+L

971 matches found

OSV
OSV
•added 2026/06/28 5:45 a.m.•19 views

CVE-2026-13483 arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authenticity

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encryptcredentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the...

2.3CVSS4.9AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/06/28 5:45 a.m.•20 views

CVE-2026-13483 arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authenticity

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encryptcredentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the...

3.1CVSS4.4AI score0.00128EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/06/28 5:45 a.m.•28 views

EUVD-2026-39983

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encryptcredentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the...

3.1CVSS4.9AI score0.00128EPSS
SaveExploits0References7
CVE
CVE
•added 2026/06/28 5:45 a.m.•40 views

CVE-2026-13483

The CVE affects arc53 DocsGPT (up to 0.18.0). The vulnerability lies in the Credential Storage component, specifically the encrypt_credentials function in application/security/encryption.py, causing insufficient verification of data authenticity. Exploitation is possible remotely with high attack...

3.1CVSS4.4AI score0.00128EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/28 12:00 a.m.•1 views

CVE-2026-13507: Insufficient Verification of Data Authenticity

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function strtouint64 of the file openviking/storage/vectordb/utils/strtouint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verificatio...

5CVSS4.9AI score0.0018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/28 12:00 a.m.•34 views

PT-2026-53163

Name of the Vulnerable Software and Affected Versions volcengine OpenViking versions prior to 0.3.22 Description Insufficient verification of data authenticity exists within the Local VectorDB Primary-key Label Handler component. The issue occurs in the str to uint64 function located in the...

5CVSS6AI score0.0018EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2026/06/28 12:00 a.m.•32 views

PT-2026-53095

Name of the Vulnerable Software and Affected Versions arc53 DocsGPT versions prior to 0.18.1 Description An issue exists in the Credential Storage component within the encrypt credentials function of the application/security/encryption.py file. This flaw leads to insufficient verification of data...

3.1CVSS5.6AI score0.00128EPSS
SaveExploits0References11
Snyk
Snyk
•added 2026/06/26 10:52 p.m.•21 views

Insufficient Verification of Data Authenticity

Overview pnpm is a Fast, disk space efficient package manager Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the default behavior of pnpm install, which accepts tarball content that does not match the integrity value recorded in the lockfile...

8.1CVSS5.8AI score0.00168EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•2 views

CVE-2026-55698: Insufficient Verification of Data Authenticity

pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm can persist package-manager bootstrap metadata in the first YAML document of pnpm-lock.yaml. Before the patch, direct pnpm execution trusted an already resolved packageManagerDependencies entry when the committed env lockfile contained...

8.8CVSS6.1AI score0.00297EPSS
SaveExploits1References6
Snyk
Snyk
•added 2026/06/24 10:14 p.m.•10 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity through the serveUpload process. An attacker can access and download content from private repositories belonging to other tenants by binding their own repository to an existing object...

7.7CVSS5.9AI score0.00236EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/24 10:14 p.m.•10 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity through the serveUpload process. An attacker can access and download content from private repositories belonging to other tenants by binding their own repository to an existing object...

7.7CVSS7.9AI score0.00236EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/24 12:00 a.m.•1 views

CVE-2026-52812: Insufficient Verification of Data Authenticity

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git LFS storage is content-addressed by OID alone / / / but per-repo authorization lives in the lfsobject table keyed repoid, oid. serveUpload skips re-uploading when the OID file already exists on disk and inserts a new repoid, oid...

7.1CVSS5.8AI score0.00236EPSS
SaveExploits0References4
Redos
Redos
•added 2026/06/23 12:00 a.m.•17 views

ROS-20260623-73-0019

Vulnerability in Python 3.10 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00225EPSS
SaveExploits0
Redos
Redos
•added 2026/06/23 12:00 a.m.•19 views

ROS-20260623-73-0021

Vulnerability in Python 3.12 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00225EPSS
SaveExploits0
Redos
Redos
•added 2026/06/23 12:00 a.m.•15 views

ROS-20260623-73-0017

The vulnerability in Python3 is related to insufficient validation of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00225EPSS
SaveExploits0
Redos
Redos
•added 2026/06/23 12:00 a.m.•17 views

ROS-20260623-73-0020

Vulnerability in Python 3.11 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00225EPSS
SaveExploits0
Redos
Redos
•added 2026/06/23 12:00 a.m.•21 views

ROS-20260623-73-0018

Vulnerability in Python 3.9 related to insufficient verification of data authenticity. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00225EPSS
SaveExploits0
Redos
Redos
•added 2026/06/23 12:00 a.m.•16 views

ROS-20260623-73-0022

Vulnerability in Python 3.13 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00225EPSS
SaveExploits0
Snyk
Snyk
•added 2026/06/22 7:58 p.m.•14 views

Insufficient Verification of Data Authenticity

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via the webhook.php process. An attacker can manipulate wallet balances and gain unauthorized access to premium...

7.1CVSS5.8AI score0.00205EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/19 8:47 p.m.•22 views

Insufficient Verification of Data Authenticity

Overview CoreWCF.Primitives is a port of the service side of Windows Communication Foundation WCF to .NET Core. The goal of this project is to enable existing WCF services to move to .NET Core. Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity...

9.1CVSS5.9AI score0.00248EPSS
SaveExploits0References3
Rows per page
Query Builder