Lucene search
K

11 matches found

NVD
NVD
added 2026/05/08 2:16 p.m.7 views

CVE-2026-44335

PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has been patched in version 1.6.32...

9.8CVSS0.00054EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/05/08 1:26 p.m.6 views

CVE-2026-44335 SSRF bypass in PraisonAI

PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has been patched in version 1.6.32...

8.7CVSS5.7AI score0.00054EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/05/08 1:26 p.m.5 views

CVE-2026-44335

PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has been patched in version 1.6.32...

8.7CVSS5.7AI score0.00054EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/05/08 1:26 p.m.25 views

CVE-2026-44335 SSRF bypass in PraisonAI

PraisonAI is a multi-agent teams system. Prior to version 1.6.32, the URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. This issue has been patched in version 1.6.32...

8.7CVSS0.00054EPSS
Exploits1References1
Snyk
Snyk
added 2025/06/10 4:42 p.m.4 views

Improper Neutralization of Special Elements Used in a Template Engine

Overview nautobot is a Source of truth and network automation platform. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine due to the misconfiguration of the Jinja2 templating feature. An attacker can expose secret values and...

7.7CVSS6.8AI score0.0018EPSS
Exploits0References2
OSV
OSV
added 2025/06/10 3:40 p.m.1 views

CVE-2025-49142 Nautobot vulnerable to secrets exposure and data manipulation through Jinja2 templating

Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions prior to 2.4.10 or prior to 1.6.32 are potentially affected. Due to insufficient security configuration of the Jinja2 templating feature used in computed fields, custom links, etc. in Nautobot, a...

6CVSS6.5AI score0.0018EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/06/10 12:0 a.m.0 views

Nautobot 安全漏洞

Nautobot is a web automation platform by the individual developers of Nautobot. A security vulnerability exists in Nautobot versions prior to 2.4.10 and prior to 1.6.32, which stems from a misconfigured Jinja2 template that could lead to data leakage or tampering...

7.1CVSS6.3AI score0.0018EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/03/14 12:0 a.m.2 views

Element Android 安全漏洞

Element Android is an Android Matrix client for the open source Element. A security vulnerability exists in Element Android version 1.6.32 and earlier, which stems from a failure to logout a user when entering an incorrect PIN more than a configured number of times, which could lead to an attacke...

5.1CVSS6.6AI score0.00084EPSS
Exploits0References5
vulnersOsv
vulnersOsv
added 2023/12/13 1:35 p.m.0 views

nautobot-bgp-models (>=0.7.0 <=1.0.0), nautobot-capacity-metrics (>=1.1.0 <=2.1.1) +26 more potentially affected by CVE-2023-50263 via nautobot (>=1.2.11 <=1.6.32)

nautobot PYPI version =1.2.11, =0.7.0, =1.1.0, =1.6.0, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.1.0, =1.0.0, =0.9.0, =1.1.0, =1.2.1 and more Source cves: CVE-2023-50263 Source advisory: OSV:GHSA-75MC-3PJC-727Q...

5.3CVSS6AI score0.00449EPSS
Exploits0
F5 Networks
F5 Networks
added 2023/02/21 7:26 p.m.45 views

K88124225: libpng vulnerability CVE-2017-12652

Security Advisory Description libpng before 1.6.32 does not properly check the length of chunks against the user limit. CVE-2017-12652 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the currently support...

9.8CVSS6.6AI score0.00609EPSS
Exploits0
OSV
OSV
added 2016/09/18 2:59 a.m.3 views

CVE-2016-0926

Cross-site scripting XSS vulnerability in Apps Manager in Pivotal Cloud Foundry PCF Elastic Runtime before 1.6.32 and 1.7.x before 1.7.8 allows remote attackers to inject arbitrary web script or HTML via unspecified input that improperly interacts with the AngularJS framework...

6.1CVSS5.9AI score0.00315EPSS
Exploits0References2
Rows per page
Query Builder