Lucene search
+L

10758 matches found

Snyk
Snyk
added 2026/06/08 4:08 a.m.10 views

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the chunker.go process of the Qdrant Backend. An attacker can compromise data integrity or availability by exploiting the use of a weak hash algorithm in remote scenarios with low privileges and high attack complexit...

4.2CVSS6AI score0.0016EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/08 4:08 a.m.9 views

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the chunker.go process of the Qdrant Backend. An attacker can compromise data integrity or availability by exploiting the use of a weak hash algorithm in remote scenarios with low privileges and high attack complexit...

4.2CVSS6AI score0.0016EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/08 4:08 a.m.9 views

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the chunker.go process of the Qdrant Backend. An attacker can compromise data integrity or availability by exploiting the use of a weak hash algorithm in remote scenarios with low privileges and high attack complexit...

4.2CVSS6AI score0.0016EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/08 3:47 a.m.11 views

GHSA-6H35-9P2W-3J3R grepai Uses a Broken or Risky Cryptographic Algorithm

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS5AI score0.0016EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2026/06/08 3:47 a.m.13 views

grepai Uses a Broken or Risky Cryptographic Algorithm

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS5.2AI score0.0016EPSS
SaveExploits0References9Affected Software1
NVD
NVD
added 2026/06/08 3:16 a.m.17 views

CVE-2026-11479

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS0.0016EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/06/08 2:58 a.m.28 views

CVE-2026-11447

A security flaw has been discovered in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function iwinfobackend of the file iwinfo.so of the component MTK Backend. The manipulation of the argument device results in command injection. The attack can be executed remotely. The exploit has been released...

6.5CVSS6.2AI score0.01073EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/08 2:15 a.m.12 views

CVE-2026-11479 yoanbernabeu grepai Qdrant Backend chunker.go weak hash

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS4.7AI score0.0016EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/06/08 2:15 a.m.15 views

CVE-2026-11479

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS4.7AI score0.0016EPSS
SaveExploits0References7Affected Software1
CVE
CVE
added 2026/06/08 2:15 a.m.77 views

CVE-2026-11479

CVE-2026-11479 affects yoanbernabeu grepai 0.35.0, specifically the Qdrant Backend component’s file indexer/chunker.go. The issue involves manipulation that leads to use of a weak hash, enabling a remote attack. Exploitation is described as difficult, with network attack vector and low privileges...

4.2CVSS4.8AI score0.0016EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/06/08 2:15 a.m.58 views

CVE-2026-11479 yoanbernabeu grepai Qdrant Backend chunker.go weak hash

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS0.0016EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/06/08 2:15 a.m.31 views

EUVD-2026-35010

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS4.7AI score0.0016EPSS
SaveExploits0References7
OSV
OSV
added 2026/06/08 2:15 a.m.17 views

CVE-2026-11479 yoanbernabeu grepai Qdrant Backend chunker.go weak hash

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

2.3CVSS4.9AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/06/08 12:00 a.m.17 views

PT-2026-47570

Summary The TDengine DAQ storage connector's escapeTdString at server/runtime/storage/tdengine/index.js:10 doubles single quotes but does not escape backslashes. TDengine's SQL parser treats ' as a literal single quote inside a string, so a tag id of the form x' OR 1=1-- escapes the first single...

5.3CVSS5.5AI score
SaveExploits0References3
CNNVD
CNNVD
added 2026/06/08 12:00 a.m.23 views

grepai 加密问题漏洞

grepai is a semantic search-based code understanding tool developed by Yoan Bernabeu. Version 0.35.0 of grepai has an encryption vulnerability. This vulnerability stems from improper handling of files in the Qdrant backend component’s file indexer/chunker.go file, which may lead to the use of wea...

4.2CVSS5AI score0.0016EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/08 12:00 a.m.30 views

PT-2026-47241

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS4.7AI score0.0016EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/06/08 12:00 a.m.21 views

PT-2026-47595

It was discovered that poppler incorrectly handled certain malformed PDF tiling patterns in the Splash backend. An attacker could possibly use this issue to execute arbitrary code, obtain sensitive information, or cause a denial of service...

7.8CVSS5.9AI score0.00252EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/06/08 12:00 a.m.19 views

Apache HTTP Server 安全漏洞

Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server is known for its speed, reliability, and ability to be expanded through simple APIs. There were security vulnerabilities in Apache HTTP Server versions 2.4.0 to 2.4.67. These...

7.5CVSS5.6AI score0.00708EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/08 12:00 a.m.41 views

PT-2026-47446

Name of the Vulnerable Software and Affected Versions Nginx Proxy Manager versions 2.9.14 through 2.15.1 Description An authenticated remote code execution issue exists via OS command injection in the setupCertbotPlugins function located in backend/setup.js. Attackers with certificates:manage...

7.7CVSS6.6AI score0.00921EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2026/06/08 12:00 a.m.22 views

Apache HTTP Server 安全漏洞

Apache HTTP Server is an open-source web server developed by the Apache Foundation in the United States. This server is known for its speed, reliability, and ability to be expanded through simple APIs. Apache HTTP Server versions 2.4.67 and earlier contain security vulnerabilities, which stem fro...

7.5CVSS5.4AI score0.01118EPSS
SaveExploits0References1
Rows per page
Query Builder