55468 matches found
CVE-2026-52132
The llama.cpp software (versions through commit 97f06e9 ) is vulnerable to a Denial of Service (DoS) attack when started with the --reranking flag. A remote attacker can trigger a std::bad_alloc memory allocation failure and an HTTP 500 error by sending a negative value for the top_n variable in ...
CVE-2026-52111
The fast-note-sync-service (versions
CVE-2026-51956
A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0 . The root cause is a failure to enforce tenant-level ownership checks when accessing or updating company objects via the /company/{id} endpoint. An authenticated user from one tenant can read and modif...
CVE-2026-52132
llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service std::badalloc and HTTP 500 via a negative topn value in a POST request to /rerank...
CVE-2026-52111
An issue in fast-note-sync-service =2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey...
PT-2026-84140
A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The...
PT-2026-84490
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description An unauthenticated Denial-of-Service DoS issue exists in the API endpoint of AOS-CX. Successful exploitation allows an attacker to interrupt the normal operation of the affected service...
CVE-2026-52132
llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service std::badalloc and HTTP 500 via a negative topn value in a POST request to /rerank...
PT-2026-84441
An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to manipulate user generated files, potentially leading to unauthorized changes in critical system configurations,...
PT-2026-84473
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A privilege escalation issue exists in the API endpoint of AOS-CX. An authenticated user with low-privilege operator permissions can access sensitive information from the system, provided a...
EUVD-2026-69413
An issue in fast-note-sync-service =2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey...
PT-2026-84414
Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to make limited unauthorized modifications to the underlying operating system and disrupt the...
PT-2026-84303
GROWI contains an access control vulnerability in the GET / api/v3/revisions/:id endpoint that validates access against a query parameter but returns the revision identified by the path parameter without confirming they reference the same page. Authenticated attackers can pair a page identifier...
CVE-2026-84147: Unrestricted Upload of File with Dangerous Type
This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system...
CVE-2026-73710: Missing Authentication for Critical Function
Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to make limited unauthorized modifications to the underlying operating system and disrupt the...
CVE-2026-52132
llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service std::badalloc and HTTP 500 via a negative topn value in a POST request to /rerank...
PT-2026-84449
Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description An issue in the API endpoint allows an unauthenticated remote attacker to view information handled by the system. This could enable an attacker to gain insight into...
CVE-2026-73758: Improper Privilege Management
A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...
CVE-2026-73745: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information handled by the affected system. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk o...
CVE-2026-11873: Generation of Error Message Containing Sensitive Information
An Apache-proxied Dogtag CA REST endpoint exposed by IdM POST /ca/rest/certrequests returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. The same unauthenticated error path emits large multi-line stack traces into the CA debug log, creating a log-amplification...