44019 matches found
PYSEC-2026-2636 mem0ai mem0 has an Improper Input Validation Issue
A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vectorstores/faiss.py. Performing a manipulation results in deserialization. It is possible to initiate the attack remotely. The exploit has been made public and could be used...
PYSEC-2026-2561 Denial of service in langchain-community
Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...
CVE-2026-14453 A user with low privileges can inject SSTI templates that can lead to RCE in open-tickets
This vulnerability is a critical Server-Side Template Injection SSTI in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The messageconfirm field is stored without sanitization and rendered via Smarty with no security policy enabled, allowing any authenticated user, to...
The vulnerability of the nfsd_set_fh_dentry() function in the fs/nfsd/nfsfh.c module, which is part of the Linux kernel’s Network File System support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nfsdsetfhdentry function in the fs/nfsd/nfsfh.c module, which supports the Network File System in Linux kernels, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the `dc_state_destruct()` function in the `drivers/gpu/drm/amd/display/dc/core/dc_state.c` file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dcstatedestruct function in the drivers/gpu/drm/amd/display/dc/core/dcstate.c file of the Linux kernel lies in the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the is_cmd_string_valid function in the /boafrm/formWsc file of the libapmib.so component of the TOTOLINK N300RT router software allows a attacker to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iscmdstringvalid function in the /boafrm/formWsc file of the libapmib.so component of the TOTOLINK N300RT router software is related to the issue where the operation is performed outside of the buffer in memory when processing the localPin parameter. Exploiting this...
Decidim - Admin user search allows SQL injection through similarity-based sorting
Description The admin organization user search uses the untrusted term value inside raw SQL ORDER BY expressions. Because the value is interpolated before Rails sanitization is applied, a crafted search string is executed by PostgreSQL as part of the sort expression. Impact - Exploitation require...
PT-2026-57656
This vulnerability is a critical Server-Side Template Injection SSTI in Centreon's centreon-open-tickets module that leads to Remote Code Execution. The message confirm field is stored without sanitization and rendered via Smarty with no security policy enabled, allowing any authenticated user, t...
The vulnerability of the mtd_check_of_node() function in the drivers/mtd/mtdcore.c file of the memory driver for the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mtdcheckofnode function in the drivers/mtd/mtdcore.c file of the Linux operating system’s memory driver module is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...
ROS-20260713-73-0022
The vulnerability of the Perl module from the zlib library is related to incorrect input of configuration data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
OPENSUSE-SU-2026:11256-1 busybox-1.38.0-1.1 on GA media
These are all security issues fixed in the busybox-1.38.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-57830
These are all security issues fixed in the libxml2-16-2.15.3-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-57832
These are all security issues fixed in the patch-2.8-3.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-57833
These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11254-1 chromedriver-150.0.7871.114-1.1 on GA media
These are all security issues fixed in the chromedriver-150.0.7871.114-1.1 package on the GA media of openSUSE Tumbleweed...
Akamai Cloud Pulse Audit Logs Are Generally Available
...
The vulnerability of the tcf_idrinfodestroy() function in the net/sched/act_api.c module of the net/sched subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tcfidrinfodestroy function in the net/sched/actapi.c module of the net/sched subsystem of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...
OPENSUSE-SU-2026:11250-1 qemu-11.0.2-1.1 on GA media
These are all security issues fixed in the qemu-11.0.2-1.1 package on the GA media of openSUSE Tumbleweed...