Lucene search
+L

2 matches found

PyPA
PyPA
•added 2026/06/29 11:50 a.m.•19 views

qdrant input validation failure

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...

9.8CVSS7.3AI score0.00909EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
•added 2026/01/26 11:22 p.m.•16 views

EUVD-2026-4732

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. If AnythingLLM prior to version 1.10.0 is configured to use Qdrant as the vector database with an API key, this QdrantApiKey could be exposed in plain text to unauthenticate...

8.7CVSS5.9AI score0.01711EPSS
SaveExploits1References1
Rows per page
Query Builder