Lucene search
+L

9523 matches found

BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.13 views

The vulnerability of the bootloader component in Android operating systems of Samsung mobile devices allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bootloader component in Android mobile devices from Samsung is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

7.2CVSS5.5AI score0.00317EPSS
SaveExploits1References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/31 12:00 a.m.22 views

The vulnerability of the PKIAuthenticationPlugin plugin for the Apache Solr search server allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PKIAuthenticationPlugin plugin for the Apache Solr search server is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

10CVSS5.8AI score0.91561EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2024/10/29 6:34 p.m.11 views

CLSA-2024-1730226852 php: Fix of CVE-2024-8925

CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data boundaries larger than the read buffer...

5.3CVSS6.9AI score0.00935EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2024/10/29 3:32 p.m.53 views

@langchain/community SQL Injection vulnerability

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection. This vulnerability permits unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all...

9.8CVSS8.1AI score0.00311EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2024/10/29 3:32 p.m.55 views

GHSA-45PG-36P6-83V9 Langchain SQL Injection vulnerability

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all data, breaches in multi-tenant securit...

4.9CVSS7.8AI score0.13743EPSS
SaveExploits2References6
Github Security Blog
Github Security Blog
added 2024/10/29 3:32 p.m.66 views

Langchain SQL Injection vulnerability

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all data, breaches in multi-tenant securit...

9.8CVSS9.9AI score0.13743EPSS
SaveExploits2References6Affected Software2
OSV
OSV
added 2024/10/29 3:32 p.m.28 views

GHSA-6M59-8FMV-M5F9 @langchain/community SQL Injection vulnerability

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection. This vulnerability permits unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all...

4.9CVSS7.5AI score0.00311EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2024/10/29 2:56 p.m.17 views

CVE-2024-8309

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all data, breaches in multi-tenant securit...

4.9CVSS8.6AI score0.13743EPSS
SaveExploits2References6
NVD
NVD
added 2024/10/29 1:15 p.m.50 views

CVE-2024-7042

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection. This vulnerability permits unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all...

9.8CVSS0.00311EPSS
SaveExploits1References2
PyPA
PyPA
added 2024/10/29 1:15 p.m.12 views

PYSEC-2024-114

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection. This vulnerability permits unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all...

9.8CVSS7.4AI score0.00311EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/10/29 12:50 p.m.19 views

CVE-2024-8309 SQL Injection in langchain-ai/langchain

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all data, breaches in multi-tenant securit...

4.9CVSS6.4AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/10/29 12:50 p.m.20 views

CVE-2024-8309 SQL Injection in langchain-ai/langchain

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all data, breaches in multi-tenant securit...

4.9CVSS8.5AI score0.13743EPSS
SaveExploits2References2
CVE
CVE
added 2024/10/29 12:50 p.m.125 views

CVE-2024-8309

Technical details for CVE-2024-8309 are not provided in the supplied documents. Public information appears limited to high‑level description. Monitor for updates and refer to primary sources for affected versions and fixes.

9.8CVSS6.2AI score0.13743EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2024/10/29 12:50 p.m.44 views

CVE-2024-7042 Prompt Injection in langchain-ai/langchainjs Leading to SQL Injection

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection. This vulnerability permits unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all...

4.9CVSS0.00311EPSS
SaveExploits1References2
CVE
CVE
added 2024/10/29 12:50 p.m.342 views

CVE-2024-7042

Technical details about CVE-2024-7042 are not present in the provided connected documents. Public details are limited to the Initial Description. Monitor for updates and vendor advisories for affected LangChainJS versions and remediation.

9.8CVSS5.9AI score0.00311EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2024/10/29 12:50 p.m.19 views

CVE-2024-7042 Prompt Injection in langchain-ai/langchainjs Leading to SQL Injection

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection. This vulnerability permits unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all...

4.9CVSS6AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/10/29 12:50 p.m.14 views

CVE-2024-7042 Prompt Injection in langchain-ai/langchainjs Leading to SQL Injection

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection. This vulnerability permits unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all...

4.9CVSS7.8AI score0.00311EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:00 a.m.13 views

The vulnerability of the filemap_fault_recheck_pte_none() function in the Linux kernel’s memory management subsystem allows an attacker to compromise the integrity of protected information.

The vulnerability of the filemapfaultrecheckptenone function in the mm/filemap.c module of the Linux kernel’s memory management subsystem is related to the repeated use of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an...

3.3CVSS5.3AI score0.00192EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:00 a.m.11 views

The vulnerability of the Google Cloud Migrate data and application migration software, related to incorrect default permissions, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Google Cloud Migrate data and application migration software is related to incorrect default permissions. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS5.5AI score0.00072EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/29 12:00 a.m.20 views

PT-2024-7627 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 130.0.6723.92 Microsoft Edge versions prior to the fixed version affected versions not specified Description: The issue is related to a use-after-free vulnerability in the implementation of WebRTC technology in...

10CVSS8.2AI score0.20713EPSS
SaveExploits28References264
Rows per page
Query Builder