Lucene search
+L

6 matches found

Snyk
Snyk
•added 2026/06/19 1:34 p.m.•20 views

Missing Authentication for Critical Function

Overview network-ai is an AI agent orchestration framework for TypeScript/Node.js - 29 adapters LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw, A2A, Codex, MiniMax, NemoClaw, APS, Copilot, LangGraph, Anthropic Compu Affected version...

9.3CVSS6AI score0.00521EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/06 9:31 p.m.•22 views

EUVD-2026-28206

A vulnerability has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. This affects an unknown function of the file /cdemos/echs/api/v2/ of the component Response Header Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The exploit ha...

6.9CVSS5.2AI score0.00483EPSS
SaveExploits0References5
NVD
NVD
•added 2026/05/06 8:16 p.m.•22 views

CVE-2026-8033

A vulnerability has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. This affects an unknown function of the file /cdemos/echs/api/v2/ of the component Response Header Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The exploit ha...

6.9CVSS0.00483EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/05/06 7:00 p.m.•10 views

CVE-2026-8032

A flaw has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. The impacted element is an unknown function of the file /cdemos/echs/priv/echs.js. This manipulation of the argument ADMINKEY causes hard-coded credentials. The attack is possible to be carried out remotely. The exploit has...

7.5CVSS6.8AI score0.00472EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2026/05/06 6:00 p.m.•10 views

CVE-2026-8031

A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7. The affected element is an unknown function of the file /cdemos/echs/api/v2/patient-records of the component API Endpoint. The manipulation results in missing authentication. The attack can be executed remotely. The...

6.9CVSS5.8AI score0.00675EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/02 12:00 a.m.•22 views

PT-2026-5743

Name of the Vulnerable Software and Affected Versions Fastify versions prior to 5.7.3 Description Fastify is a web framework for Node.js. A denial-of-service condition exists in Fastify’s Web Streams response handling. A slow or non-reading client can cause unbounded buffering when backpressure i...

3.7CVSS5.5AI score0.00554EPSS
SaveExploits0References13
Rows per page
Query Builder