27609 matches found
CVE-2026-70479
Open WebUI vulnerability CVE-2026-70479 affects the self-hosted Open WebUI platform. From versions 0.9.6 through 0.11.0, when WEB_LOADER_ENGINE=playwright is used, the Playwright web loader validates only the top-level page requests and allows sub-resource requests to pass unvalidated. This enabl...
CVE-2026-70553
MaxSite CMS is affected by an unauthenticated remote code execution vulnerability. An attacker can submit crafted POST data to the install endpoint after installation, using a malicious db_dbprefix value to break out of a PHP string in application/config/database.php and inject PHP statements tha...
CVE-2026-47617
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47616
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47618
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47615
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47614
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure...
EUVD-2026-52813
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47618
CVE-2026-47618 affects NVIDIA Dynamo for Linux, specifically the Rust multimodal media fetcher. The vulnerability enables server-side request forgery (SSRF) that could lead to information disclosure. The NVIDIA bulletin lists affected versions (0 to v1.1.0) updated to v1.1.1, with additional fixe...
CVE-2026-47618
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure...
EUVD-2026-52812
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47617
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery via DNS rebinding. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47617
Summary (CVE-2026-47617) : NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher that could allow an attacker to perform a server-side request forgery via DNS rebinding , with potential information disclosure . The CVSS vector (Network, Low attack complexity, No privile...
CVE-2026-15307
A flaw was found in Django. GeoDjango's spatial lookups can be exploited by a staff user with view permissions who submits a specially crafted spatial-field filter. This vulnerability allows an attacker to write arbitrary files to the server, which can lead to remote code execution. Additionally,...
CVE-2026-47616
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47616
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher that could allow a network attacker to trigger a server-side request forgery, potentially leading to information disclosure. Affected software: NVIDIA Dynamo for Linux. Root cause/impact: SSRF in multimodal media fet...
EUVD-2026-52809
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47615
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47615
Summary: CVE-2026-47615 affects NVIDIA Dynamo for Linux. Affected component: server-side request forgery via a crafted URL in a multimodal request, with potential information disclosure as the impact. Root cause and exact vulnerable subcomponent are described in the NVIDIA/NVD entries. CVSSv3.1 m...