Lucene search
+L

7 matches found

NVD
NVD
added 2026/03/16 4:16 p.m.5 views

CVE-2026-4276

LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries...

7.5CVSS0.00277EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/16 3:31 p.m.4 views

CVE-2026-4276 LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.

LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries...

5.8AI score0.00277EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/16 3:31 p.m.3 views

CVE-2026-4276 LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.

LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries...

7.5CVSS7.2AI score0.00277EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/24 7:20 p.m.45 views

GHSA-5FP8-C45M-256P Improper Encoding or Escaping of Output in Apache Superset

Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs...

7.1CVSS6.2AI score0.01761EPSS
SaveExploits0References6
OSV
OSV
added 2021/11/17 3:15 p.m.18 views

CVE-2021-42250

Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs...

6.5CVSS6.4AI score
SaveExploits0References2
Prion
Prion
added 2021/11/17 3:15 p.m.14 views

Input validation

Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs...

4CVSS6.3AI score0.01761EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2020/06/25 8:15 p.m.25 views

CVE-2020-4072

In generator-jhipster-kotlin version 1.6.0 log entries are created for invalid password reset attempts. As the email is provided by a user and the api is public this can be used by an attacker to forge log entries. This is vulnerable to https://cwe.mitre.org/data/definitions/117.html This problem...

5.3CVSS0.01214EPSS
SaveExploits0References4
Rows per page
Query Builder