Lucene search
+L

7 matches found

Positive Technologies
Positive Technologies
•added 2026/08/05 12:00 a.m.•6 views

PT-2026-68296

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description An authorization bypass exists in the MemoryComponent that allows authenticated users to access the chat history of other users through session id collision. The retrieve messages and...

7.1CVSS5.8AI score0.00297EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/28 12:00 a.m.•2 views

CVE-2026-13442: .NET Misconfiguration: Use of Impersonation

IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only vector content and influence later query results. This causes cross-user information disclosure and limited integrity impact through persistent poisoning of returned results...

7.1CVSS5.8AI score0.00295EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/01 12:00 a.m.•23 views

ASB-A-435188844

Bulletin has no description...

6AI score
SaveExploits0
EUVD
EUVD
•added 2025/12/08 6:30 p.m.•20 views

EUVD-2025-201758

In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5AI score0.00175EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/08 12:00 a.m.•20 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. Google Android suffers from a security vulnerability that stems from a lack of permission checking, which could lead to cross-user information disclosure...

5.5CVSS6.1AI score0.00084EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-5947

Malicious code in bioql PyPI...

8.7CVSS6.6AI score0.00398EPSS
SaveExploits0References4
NVD
NVD
•added 2025/02/28 5:15 p.m.•16 views

CVE-2025-20060

An attacker could expose cross-user personal identifiable information PII and personal health information transmitted to the Android device via the Dario Health application database...

8.7CVSS0.00398EPSS
SaveExploits0References2
Rows per page
Query Builder