158839 matches found
EUVD-2026-30255
The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation via missing authorization in all versions up to, and including, 5.1.2. This is due to missing nonce verification and capability checks in the iwarsaverecipe AJAX handler. This makes it possible for unauthenticated...
PT-2026-40952
HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions...
PT-2026-41186
Name of the Vulnerable Software and Affected Versions CodeWhale versions prior to 0.8.26 Description The task create tool spawns durable sub-agents that inherit insecure default settings. Specifically, the allow shell variable defaults to true and the auto approve variable defaults to true. When ...
EUVD-2026-30144
Using the $timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server...
CVE-2026-33378
Using the $timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server...
CVE-2026-33378
Using the $timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server...
CVE-2026-33378 Grafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro
Using the $timeGroup macro, one can achieve an OOM by overloading the server. This requires a SQL datasource. If the server is set up to auto-restart, the impact is minimal or non-existent, as the attack can take upwards of half an hour to crash the server...
CVE-2025-32425
AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. In AutoGPT, the execution process is recorded to the console stdout/stderr, and deployed in container mode, which is automatically captured by Docker an...
CVE-2025-32425
CVE-2025-32425 affects AutoGPT platform prior to v0.6.32, where container execution logs emitted to stdout/stderr could be captured by Docker and stored as container logs without a size limit. This lack of log rotation/log size control can lead to server disk resource exhaustion and DoS under hig...
CVE-2026-44289 vulnerabilities
Vulnerabilities for packages: opentelemetry-auto-instrumentations-node, homepage, librechat, gemini-cli, pulumi, cadence-web, renovate, vitess, kibana, nemo, kubeflow-centraldashboard...
CVE-2026-44292 vulnerabilities
Vulnerabilities for packages: opentelemetry-auto-instrumentations-node, homepage, librechat, gemini-cli, pulumi, cadence-web, renovate, vitess, kibana, nemo, kubeflow-centraldashboard...
CVE-2026-44288 vulnerabilities
Vulnerabilities for packages: opentelemetry-auto-instrumentations-node, homepage, librechat, gemini-cli, pulumi, cadence-web, renovate, vitess, kibana, nemo, kubeflow-centraldashboard...
GHSA-JVWF-75H9-CWGG vulnerabilities
Vulnerabilities for packages: opentelemetry-auto-instrumentations-node, homepage, librechat, gemini-cli, pulumi, cadence-web, renovate, vitess, kibana, nemo, kubeflow-centraldashboard...
GHSA-FX83-V9X8-X52W vulnerabilities
Vulnerabilities for packages: opentelemetry-auto-instrumentations-node, homepage, librechat, gemini-cli, pulumi, cadence-web, renovate, vitess, kibana, nemo, kubeflow-centraldashboard...
GHSA-2PR8-PHX7-X9H3 vulnerabilities
Vulnerabilities for packages: opentelemetry-auto-instrumentations-node, homepage, librechat, gemini-cli, pulumi, cadence-web, renovate, vitess, kibana, nemo, kubeflow-centraldashboard...
GHSA-685M-2W69-288Q vulnerabilities
Vulnerabilities for packages: opentelemetry-auto-instrumentations-node, homepage, librechat, gemini-cli, pulumi, cadence-web, renovate, vitess, kibana, nemo, kubeflow-centraldashboard...
GHSA-66FF-XGX4-VCHM vulnerabilities
Vulnerabilities for packages: opentelemetry-auto-instrumentations-node, homepage, librechat, gemini-cli, pulumi, cadence-web, renovate, vitess, kibana, nemo, kubeflow-centraldashboard...
CVE-2026-44290 vulnerabilities
Vulnerabilities for packages: opentelemetry-auto-instrumentations-node, homepage, librechat, gemini-cli, pulumi, cadence-web, renovate, vitess, kibana, nemo, kubeflow-centraldashboard...
CVE-2026-44294 vulnerabilities
Vulnerabilities for packages: opentelemetry-auto-instrumentations-node, homepage, librechat, gemini-cli, pulumi, cadence-web, renovate, vitess, kibana, nemo, kubeflow-centraldashboard...