Lucene search
+L

771 matches found

OSV
OSV
added 2026/06/28 9:30 p.m.5 views

CVE-2026-13507 volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function strtouint64 of the file openviking/storage/vectordb/utils/strtouint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verificatio...

2.3CVSS5.5AI score0.00138EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/06/28 9:30 p.m.42 views

CVE-2026-13507 volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function strtouint64 of the file openviking/storage/vectordb/utils/strtouint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verificatio...

5CVSS0.00138EPSS
SaveExploits0References7
CVE
CVE
added 2026/06/28 9:30 p.m.25 views

CVE-2026-13507

Summary (CVE-2026-13507) Volcengine OpenViking up to 0.3.21 is affected in the Local VectorDB Primary-key Label Handler, specifically the str_to_uint64 function in openviking/storage/vectordb/utils/str_to_uint64.py. The issue arises from manipulating the argument ID, causing insufficient verifica...

5CVSS5.5AI score0.00138EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/06/28 9:30 p.m.13 views

CVE-2026-13507

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function strtouint64 of the file openviking/storage/vectordb/utils/strtouint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verificatio...

5CVSS5.5AI score0.00138EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2026/06/28 7:16 a.m.17 views

CVE-2026-13483

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encryptcredentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the...

3.1CVSS0.00097EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/06/28 5:45 a.m.10 views

CVE-2026-13483

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encryptcredentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the...

3.1CVSS4.9AI score0.00097EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2026/06/28 5:45 a.m.44 views

CVE-2026-13483 arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authenticity

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encryptcredentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the...

3.1CVSS0.00097EPSS
SaveExploits0References7
OSV
OSV
added 2026/06/28 5:45 a.m.4 views

CVE-2026-13483 arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authenticity

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encryptcredentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the...

2.3CVSS4.9AI score0.00097EPSS
SaveExploits0References9
CVE
CVE
added 2026/06/28 5:45 a.m.22 views

CVE-2026-13483

The CVE affects arc53 DocsGPT (up to 0.18.0). The vulnerability lies in the Credential Storage component, specifically the encrypt_credentials function in application/security/encryption.py, causing insufficient verification of data authenticity. Exploitation is possible remotely with high attack...

3.1CVSS4.9AI score0.00097EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/06/28 5:45 a.m.13 views

EUVD-2026-39983

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encryptcredentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the...

3.1CVSS4.9AI score0.00097EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/28 12:0 a.m.19 views

PT-2026-53163

Name of the Vulnerable Software and Affected Versions volcengine OpenViking versions prior to 0.3.22 Description Insufficient verification of data authenticity exists within the Local VectorDB Primary-key Label Handler component. The issue occurs in the str to uint64 function located in the...

5CVSS6AI score0.00138EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/06/28 12:0 a.m.20 views

PT-2026-53095

Name of the Vulnerable Software and Affected Versions arc53 DocsGPT versions prior to 0.18.1 Description An issue exists in the Credential Storage component within the encrypt credentials function of the application/security/encryption.py file. This flaw leads to insufficient verification of data...

3.1CVSS5.6AI score0.00097EPSS
SaveExploits0References11
Snyk
Snyk
added 2026/06/24 10:14 p.m.7 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity through the serveUpload process. An attacker can access and download content from private repositories belonging to other tenants by binding their own repository to an existing object...

7.7CVSS5.9AI score0.00216EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/24 10:14 p.m.7 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity through the serveUpload process. An attacker can access and download content from private repositories belonging to other tenants by binding their own repository to an existing object...

7.7CVSS5.9AI score0.00216EPSS
SaveExploits0References2
Redos
Redos
added 2026/06/23 12:0 a.m.9 views

ROS-20260623-73-0021

Vulnerability in Python 3.12 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.8 views

ROS-20260623-73-0019

Vulnerability in Python 3.10 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.9 views

ROS-20260623-73-0017

The vulnerability in Python3 is related to insufficient validation of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.9 views

ROS-20260623-73-0020

Vulnerability in Python 3.11 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.10 views

ROS-20260623-73-0018

Vulnerability in Python 3.9 related to insufficient verification of data authenticity. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.8 views

ROS-20260623-73-0022

Vulnerability in Python 3.13 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Rows per page
Query Builder