44877 matches found
EUVD-2026-52816
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering...
CVE-2026-47620
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to data tampering and denial of service...
CVE-2026-64631
A vulnerability allowing a low-privileged user to inject SQL and extract database contents...
CVE-2026-64630
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
CVE-2026-64630
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
CVE-2026-64631
A vulnerability allowing a low-privileged user to inject SQL and extract database contents...
CVE-2026-64631
CVE-2026-64631 describes an SQL injection vulnerability exploitable by a low-privilege user that can extract database contents. According to the provided metrics, the vulnerability has HIGH base severity (CVSS 4.0, score 8.5) with network attack vector, low attack complexity, and no user interact...
CVE-2026-64631
A vulnerability allowing a low-privileged user to inject SQL and extract database contents...
CVE-2026-64631
A vulnerability allowing a low-privileged user to inject SQL and extract database contents...
CVE-2026-64630
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
EUVD-2026-52757
A vulnerability allowing a low-privileged user to inject SQL and extract database contents...
CVE-2026-64630
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
CVE-2026-64630
Technical details (affected products, affected component, root cause, exact impact, or remedies) are not publicly available in the provided documents. Monitor for updates.
EUVD-2026-52759
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link...
Missing Authorization
Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Missing Authorization in the /api/v1/files route, which lacks proper permission checks for file listing and deletion operations. An attacker can access and remove files belonging to other workspaces within...
CVE-2026-69252 Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the /api/v1/files route was protected only by the feat:files feature gate and did not enforce checkPermission on GET or DELETE. A low-privileged authenticated API key with unrelated permission...
CVE-2026-69252 Flowise: Missing authorization on `/api/v1/files` allows low-privileged API keys to list and delete files across workspaces within the same organization
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the /api/v1/files route was protected only by the feat:files feature gate and did not enforce checkPermission on GET or DELETE. A low-privileged authenticated API key with unrelated permission...
CVE-2026-69252
Flowise CVE-2026-69252: Before 3.1.3, the /api/v1/files route was protected only by feat:files and did not enforce checkPermission on GET/DELETE. A low-privileged, authenticated API key could list files under the organization root and delete files in other workspaces within the same organization ...
EUVD-2026-52726
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the /api/v1/files route was protected only by the feat:files feature gate and did not enforce checkPermission on GET or DELETE. A low-privileged authenticated API key with unrelated permission...