Lucene search
+L

8246 matches found

Cvelist
Cvelist
added 2026/04/01 8:35 p.m.27 views

CVE-2026-4101 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 under certain load conditions could allow an attacker to bypass...

8.1CVSS0.0036EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/01 8:35 p.m.2 views

CVE-2026-4101

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 under certain load conditions could allow an attacker to bypass...

8.1CVSS5.9AI score0.0036EPSS
SaveExploits0References2Affected Software4
Vulnrichment
Vulnrichment
added 2026/04/01 8:35 p.m.4 views

CVE-2026-4101 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 under certain load conditions could allow an attacker to bypass...

8.1CVSS5.9AI score0.0036EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/01 6:16 p.m.8 views

CVE-2026-34446

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, there is an issue in onnx.load, the code checks for symlinks to prevent path traversal, but completely misses hardlinks because a hardlink looks exactly like a regular file on the...

5.5CVSS0.00176EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/01 5:37 p.m.1 views

CVE-2026-34446 ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, there is an issue in onnx.load, the code checks for symlinks to prevent path traversal, but completely misses hardlinks because a hardlink looks exactly like a regular file on the...

4.7CVSS5.8AI score0.00176EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/01 5:37 p.m.2 views

CVE-2026-34446

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, there is an issue in onnx.load, the code checks for symlinks to prevent path traversal, but completely misses hardlinks because a hardlink looks exactly like a regular file on the...

4.7CVSS5.8AI score0.00176EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/04/01 5:37 p.m.21 views

CVE-2026-34446 ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, there is an issue in onnx.load, the code checks for symlinks to prevent path traversal, but completely misses hardlinks because a hardlink looks exactly like a regular file on the...

4.7CVSS0.00176EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/04/01 5:37 p.m.10 views

CVE-2026-34446

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, there is an issue in onnx.load, the code checks for symlinks to prevent path traversal, but completely misses hardlinks because a hardlink looks exactly like a regular file on the...

5.5CVSS5.3AI score0.00176EPSS
SaveExploits0
CVE
CVE
added 2026/04/01 5:37 p.m.24 views

CVE-2026-34446

CVE-2026-34446 affects Open Neural Network Exchange (ONNX). The vulnerability is in onnx.load where hardlinks can bypass the path-traversal check, allowing an arbitrary file read. The issue is fixed in ONNX 1.21.0. Impact is described as arbitrary file read with LOCAL attack vector and MEDIUM bas...

5.5CVSS5.8AI score0.00176EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/04/01 5:37 p.m.2 views

CVE-2026-34446 ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, there is an issue in onnx.load, the code checks for symlinks to prevent path traversal, but completely misses hardlinks because a hardlink looks exactly like a regular file on the...

4.7CVSS5.9AI score0.00176EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/04/01 5:30 p.m.8 views

CVE-2026-34445

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, the ExternalDataInfo class in ONNX was using Python’s setattr function to load metadata like file paths or data lengths directly from an ONNX model file. It didn’t check if the...

8.6CVSS5.2AI score0.00288EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2026/04/01 12:14 a.m.21 views

Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash

Summary Ash.Type.Module.castinput/2 unconditionally creates a new Erlang atom via Module.concatvalue for any user-supplied binary string that starts with "Elixir.", before verifying whether the referenced module exists. Because Erlang atoms are never garbage-collected and the BEAM atom table has ...

8.2CVSS6AI score0.00423EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.7 views

Open Neural Network Exchange 安全漏洞

Open Neural Network Exchange is an open-source ecosystem developed by Open Neural Network Exchange. It enables AI developers to choose the appropriate tools as the project evolves. Versions of Open Neural Network Exchange prior to 1.21.0 contained a security vulnerability. This vulnerability...

5.5CVSS5.8AI score0.00176EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/01 12:0 a.m.7 views

PT-2026-29612

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 under certain load conditions could allow an attacker to bypass...

8.1CVSS5.9AI score0.0036EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.8 views

IBM Verify Identity Access Container和IBM Verify Identity Access 授权问题漏洞

IBM Verify Identity Access and Security Verify Access are a family of identity and access management solutions that provide user authentication and access control capabilities. An authentication bypass vulnerability exists in IBM Verify Identity Access. The vulnerability arises due to a flaw in t...

9.8CVSS5.8AI score0.0036EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/31 5:16 p.m.15 views

CVE-2026-34360

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, the /loadIG HTTP endpoint in the FHIR Validator HTTP service accepts a user-supplied URL via JSON body and makes server-side HTTP requests to it without any hostname,...

5.8CVSS0.00235EPSS
SaveExploits1References1
CVE
CVE
added 2026/03/31 4:56 p.m.38 views

CVE-2026-34361

CVE-2026-34361 affects HAPI FHIR before 6.9.4. The FHIR Validator HTTP service exposes an unauthenticated /loadIG endpoint that can trigger outbound requests to attacker‑controlled URLs. A flawed startsWith() credential provider (ManagedWebAccessUtils.getServer()) and an SSRF-like flow allow an a...

9.3CVSS5.8AI score0.00299EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/31 4:56 p.m.3 views

CVE-2026-34361 HAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, the FHIR Validator HTTP service exposes an unauthenticated "/loadIG" endpoint that makes outbound HTTP requests to attacker-controlled URLs. Combined with a startsWith...

9.3CVSS5.8AI score0.00299EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/31 4:56 p.m.8 views

CVE-2026-34361

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, the FHIR Validator HTTP service exposes an unauthenticated "/loadIG" endpoint that makes outbound HTTP requests to attacker-controlled URLs. Combined with a startsWith...

9.3CVSS5.8AI score0.00299EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/03/31 4:56 p.m.10 views

CVE-2026-34361 HAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, the FHIR Validator HTTP service exposes an unauthenticated "/loadIG" endpoint that makes outbound HTTP requests to attacker-controlled URLs. Combined with a startsWith...

9.3CVSS5.8AI score0.00299EPSS
SaveExploits1References3
Rows per page
Query Builder