Lucene search
+L

784 matches found

OSV
OSV
added 2026/06/28 5:45 a.m.6 views

CVE-2026-13483 arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authenticity

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encryptcredentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the...

2.3CVSS4.9AI score
SaveExploits0References9
CVE
CVE
added 2026/06/28 5:45 a.m.24 views

CVE-2026-13483

The CVE affects arc53 DocsGPT (up to 0.18.0). The vulnerability lies in the Credential Storage component, specifically the encrypt_credentials function in application/security/encryption.py, causing insufficient verification of data authenticity. Exploitation is possible remotely with high attack...

3.1CVSS4.9AI score0.00097EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/06/28 5:45 a.m.17 views

EUVD-2026-39983

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encryptcredentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the...

3.1CVSS4.9AI score0.00097EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/28 12:0 a.m.22 views

PT-2026-53095

Name of the Vulnerable Software and Affected Versions arc53 DocsGPT versions prior to 0.18.1 Description An issue exists in the Credential Storage component within the encrypt credentials function of the application/security/encryption.py file. This flaw leads to insufficient verification of data...

3.1CVSS5.6AI score0.00097EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/06/28 12:0 a.m.24 views

PT-2026-53163

Name of the Vulnerable Software and Affected Versions volcengine OpenViking versions prior to 0.3.22 Description Insufficient verification of data authenticity exists within the Local VectorDB Primary-key Label Handler component. The issue occurs in the str to uint64 function located in the...

5CVSS6AI score0.00138EPSS
SaveExploits0References12
Snyk
Snyk
added 2026/06/24 10:14 p.m.9 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity through the serveUpload process. An attacker can access and download content from private repositories belonging to other tenants by binding their own repository to an existing object...

7.7CVSS5.9AI score0.00216EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/24 10:14 p.m.9 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity through the serveUpload process. An attacker can access and download content from private repositories belonging to other tenants by binding their own repository to an existing object...

7.7CVSS5.9AI score0.00216EPSS
SaveExploits0References2
Redos
Redos
added 2026/06/23 12:0 a.m.9 views

ROS-20260623-73-0017

The vulnerability in Python3 is related to insufficient validation of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.10 views

ROS-20260623-73-0021

Vulnerability in Python 3.12 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.9 views

ROS-20260623-73-0019

Vulnerability in Python 3.10 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.10 views

ROS-20260623-73-0020

Vulnerability in Python 3.11 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.11 views

ROS-20260623-73-0018

Vulnerability in Python 3.9 related to insufficient verification of data authenticity. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Redos
Redos
added 2026/06/23 12:0 a.m.9 views

ROS-20260623-73-0022

Vulnerability in Python 3.13 related to insufficient verification of data authenticity. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

6CVSS6.2AI score0.00188EPSS
SaveExploits0
Snyk
Snyk
added 2026/06/22 7:58 p.m.10 views

Insufficient Verification of Data Authenticity

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via the webhook.php process. An attacker can manipulate wallet balances and gain unauthorized access to premium...

7.1CVSS5.9AI score0.00143EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/19 8:47 p.m.15 views

Insufficient Verification of Data Authenticity

Overview CoreWCF.Primitives is a port of the service side of Windows Communication Foundation WCF to .NET Core. The goal of this project is to enable existing WCF services to move to .NET Core. Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity...

9.1CVSS5.9AI score0.00178EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/06/19 7:35 p.m.8 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the CRI checkpoint import. An attacker can cause arbitrary code execution by crafting a checkpoint image that forces the system to pull a malicious image and assign it an arbitrary local...

9.9CVSS6.5AI score0.00332EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/19 7:35 p.m.9 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the CRI checkpoint import. An attacker can cause arbitrary code execution by crafting a checkpoint image that forces the system to pull a malicious image and assign it an arbitrary local...

9.9CVSS6.5AI score0.00332EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/19 7:35 p.m.5 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the CRI checkpoint import. An attacker can cause arbitrary code execution by crafting a checkpoint image that forces the system to pull a malicious image and assign it an arbitrary local...

9.9CVSS6.5AI score0.00332EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/19 1:53 p.m.7 views

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the WebsocketToken handler and the WebSocket upgrader process. An attacker can access sensitive session state and resource information by obtaining a CSRF token from an unauthenticated...

8.3CVSS5.8AI score0.00222EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/19 1:11 p.m.16 views

EUVD-2026-38017

Insufficient Verification of Data Authenticity vulnerability in Apache APISIX. The openid-connect plugin under default configuration has an attack surface that allows the attacker to spoof identity headers allowing the attacker to get unauthorized access the protected resources. This issue affect...

5.3CVSS5.8AI score0.00213EPSS
SaveExploits0References1
Rows per page
Query Builder