Lucene search
+L

587307 matches found

NVD
NVD
added yesterday6 views

CVE-2026-58071

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins...

8.2CVSS
SaveExploits0References1
NVD
NVD
added yesterday5 views

CVE-2026-58073

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials...

9.5CVSS
SaveExploits0References1
NVD
NVD
added yesterday8 views

CVE-2025-29296

H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R1510 V100R016, and H3C NE36 Pro V100R002 contain multiple command injection vulnerabilities in the /api/esps request handler. The affected object interfaces...

9.8CVSS
SaveExploits0References2
Mageia
Mageia
added yesterday5 views

Updated acl attr packages fix security vulnerabilities

The updated acl and attr packages fix security issues...

8.4CVSS5.5AI score0.00147EPSS
SaveExploits0References5
CVE
CVE
added yesterday36 views

CVE-2026-48121

The CVE-2026-48121 vulnerability affects @langchain/langgraph-checkpoint-mongodb (MongoDBSaver) and involves NoSQL parameter injection in MongoDB queries. Versions 1.3.0 and earlier pass checkpoint identifiers (thread_id, checkpoint_ns, checkpoint_id) from config.configurable directly into MongoD...

6.7CVSS5.4AI score0.00022EPSS
SaveExploits0References3
Cvelist
Cvelist
added yesterday20 views

CVE-2026-48121 @langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access

@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers threadid, checkpointns, checkpointid from config.configurable are passed into MongoDB fi...

6.7CVSS0.00022EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-63456

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

9.8CVSS5.6AI score
SaveExploits0References2Affected Software1
CVE
CVE
added yesterday11 views

CVE-2026-63456

The CVE-2026-63456 entry describes multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator that allow an unauthenticated remote attacker to bypass web authentication and access system functions. The attacker could view and modify potentially sensitive information ...

9.8CVSS5.6AI score
SaveExploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-52791

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

9.8CVSS5.6AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday19 views

CVE-2026-63455 Authentication bypass via spoofed HTTP headers Orchestrator REST API

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

9.8CVSS
SaveExploits0References1
CVE
CVE
added yesterday8 views

CVE-2026-63455

The CVE-2026-63455 issue affects HPE Networking SD-WAN Orchestrator REST API. The connected records describe authentication bypass via spoofed HTTP headers in the REST API, enabling an unauthenticated remote attacker to bypass web authentication and access system functions. Successful exploitatio...

9.8CVSS5.6AI score
SaveExploits0References1
EUVD
EUVD
added yesterday4 views

EUVD-2026-52790

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

9.8CVSS5.6AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-63455

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive...

9.8CVSS5.6AI score
SaveExploits0References2Affected Software1
NVD
NVD
added yesterday6 views

CVE-2026-69254

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, executeJavaScriptCode accepted caller-provided nodeVMOptions and merged them over the default NodeVM security settings in packages/components/src/utils.ts. An authenticated attacker reaching...

9.4CVSS
SaveExploits0References4
NVD
NVD
added yesterday5 views

CVE-2026-69110

OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can...

9.3CVSS
SaveExploits0References5
NVD
NVD
added yesterday9 views

CVE-2026-69252

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the /api/v1/files route was protected only by the feat:files feature gate and did not enforce checkPermission on GET or DELETE. A low-privileged authenticated API key with unrelated permission...

7.2CVSS
SaveExploits0References4
NVD
NVD
added yesterday6 views

CVE-2026-18773

A vulnerability was detected in NousResearch hermes-agent up to 2026.6.5. Affected by this issue is the function checkslashaccess of the file gateway/run.py of the component Quick Command Handler. The manipulation results in incorrect authorization. The attack can be launched remotely. The exploi...

6.5CVSS
SaveExploits0References5
CVE
CVE
added yesterday11 views

CVE-2026-69259

Summary: CVE-2026-69259 affects Flowise (SQLite Record Manager node) prior to 3.1.3. The vulnerability arises from user-controlled additionalConfig in SQLiteRecordManager.ts, which could overwrite the SQLite database path, allowing an authenticated attacker using a published Docker image (running...

9.4CVSS5.7AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-69259

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts accepted user-controlled additionalConfig and spread it after the intended...

9.4CVSS5.7AI score
SaveExploits0References5Affected Software1
EUVD
EUVD
added yesterday7 views

EUVD-2026-52765

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the SQLite Record Manager node in packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts accepted user-controlled additionalConfig and spread it after the intended...

9.4CVSS5.7AI score
SaveExploits0References4
Rows per page
Query Builder