Lucene search
+L

7 matches found

EUVD
EUVD
•added 2026/07/15 8:56 p.m.•22 views

EUVD-2026-44815

listmonk is a standalone, self-hosted, newsletter and mailing list manager. Prior to 6.2.0, listmonk’s GET /api/subscribers/export endpoint injects the user-controlled query parameter into QuerySubscribersForExport in internal/core/subscribers.go without calling validateQueryTables, unlike GET...

5.5CVSS6.2AI score0.00417EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/25 12:25 a.m.•15 views

SUSE CVE-2026-30860

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution RCE vulnerability exists in the application's database query functionality. The validation system fails to recursively inspect child nodes within...

9.9CVSS6.6AI score0.00765EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/03/09 8:02 a.m.•11 views

CVE-2026-30860

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution RCE vulnerability exists in the application's database query functionality. The validation system fails to recursively inspect child nodes within...

9.9CVSS6.4AI score0.00765EPSS
SaveExploits1References1
NVD
NVD
•added 2026/03/07 5:15 p.m.•14 views

CVE-2026-30860

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution RCE vulnerability exists in the application's database query functionality. The validation system fails to recursively inspect child nodes within...

9.9CVSS0.00765EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/07 4:36 p.m.•10 views

CVE-2026-30860

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution RCE vulnerability exists in the application's database query functionality. The validation system fails to recursively inspect child nodes within...

9.9CVSS6.4AI score0.00765EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2026/03/07 4:36 p.m.•43 views

CVE-2026-30860 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution RCE vulnerability exists in the application's database query functionality. The validation system fails to recursively inspect child nodes within...

9.9CVSS0.00765EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/03/06 12:00 a.m.•16 views

PT-2026-23803

Name of the Vulnerable Software and Affected Versions WeKnora versions prior to 0.2.12 Description WeKnora, an LLM-powered framework for deep document understanding and semantic retrieval, contains a remote code execution RCE issue in its database query functionality. The application's validation...

9.9CVSS6.7AI score0.00765EPSS
SaveExploits1
Rows per page
Query Builder