869233 matches found
CVE-2026-119052 llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length
llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers can send a command such as SETTENSOR with a length abov...
EUVD-2026-112818
llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers can send a command such as SETTENSOR with a length abov...
CVE-2026-119052
llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers can send a command such as SETTENSOR with a length abov...
CVE-2026-119052 llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length
llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers can send a command such as SETTENSOR with a length abov...
CVE-2026-119049
FreeMail versions prior to 5.3.2 are vulnerable to an authorization bypass in the POST /api/create endpoint. This flaw allows authenticated users who know a victim's email address to claim that existing mailbox. By leveraging the assignMailboxToUser function, an attacker can become a co-owner, gr...
CVE-2026-119048
JeeSite versions 5.11.0 through 5.19.1 are vulnerable to an Insecure Direct Object Reference (IDOR) within the AI CMS chat module . The root cause is missing and reversed ownership checks , which allows authenticated users to access other users' private conversations. Attackers who obtain or deri...
CVE-2026-119049
FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners through assignMailboxToUser to read messages and verification...
EUVD-2026-112815
FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners through assignMailboxToUser to read messages and verification...
EUVD-2026-112814
JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know or derive a victim's conversation id can call...
CVE-2026-119049 FreeMail before 5.3.2 Authorization Bypass via /api/create Mailbox Claiming
FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners through assignMailboxToUser to read messages and verification...
CVE-2026-119048 JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module
JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know or derive a victim's conversation id can call...
CVE-2026-119048
JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know or derive a victim's conversation id can call...
CVE-2026-119049 FreeMail before 5.3.2 Authorization Bypass via /api/create Mailbox Claiming
FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners through assignMailboxToUser to read messages and verification...
CVE-2026-119049 FreeMail before 5.3.2 Authorization Bypass via /api/create Mailbox Claiming
FreeMail before 5.3.2 contains an authorization bypass vulnerability that allows authenticated users to claim another user's existing mailbox via the POST /api/create endpoint. Attackers who know a victim's address can become co-owners through assignMailboxToUser to read messages and verification...
CVE-2026-119048 JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module
JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know or derive a victim's conversation id can call...
CVE-2026-119048 JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module
JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attackers who know or derive a victim's conversation id can call...
CGA-XWXH-X5GX-9Q3M
Bulletin has no description...
CGA-PVJ8-XFH6-QG68
Bulletin has no description...
CGA-MX5C-WHWX-GMR5
Bulletin has no description...
CVE-2026-44590
CVE-2026-44590 - sherlock-project/sherlock CI - RCE via pullrequesttarget Injection → Supply Chain Compromise Discovered & reported by: Astaruf Full writeup: https://nstsec.com/en/posts/sherlock-rce-pull-request-target-cve-2026-44590/ Upstream advisory: sherlock-project/sherlock GHSA advisory NVD...