Lucene search
+L

5915 matches found

Veracode
Veracode
added 2025/07/08 4:29 a.m.11 views

Hash Collision

llamaindexreaderspapers is vulnerable to Hash Collision. The vulnerability is due to the use of MD5 hashing to generate filenames for downloaded papers, which allows an attacker to exploit hash collisions by submitting papers with identical titles but different content...

5.3CVSS5.1AI score0.00284EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2025/07/07 1:38 p.m.14 views

CLSA-2025-1751895517 krb5: Fix of CVE-2025-3576

CVE-2025-3576: possible spoofing of GSSAPI-protected messages using RC4-HMAC-MD5...

5.9CVSS7.2AI score0.00345EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2025/07/07 12:30 p.m.23 views

LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each other, preventing some papers from...

5.3CVSS5AI score0.00284EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2025/07/07 12:30 p.m.13 views

GHSA-P7J4-JWJF-5X9W LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each other, preventing some papers from...

5.3CVSS5AI score0.00284EPSS
SaveExploits1References5
NVD
NVD
added 2025/07/07 10:15 a.m.16 views

CVE-2025-3044

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each othe...

5.3CVSS0.00284EPSS
SaveExploits1References2
CVE
CVE
added 2025/07/07 9:54 a.m.74 views

CVE-2025-3044

The CVE-2025-3044 affects the ArxivReader class in the llama_index project. Versions up to v0.12.22.post1 are vulnerable to MD5 hash collisions when generating filenames for downloaded papers, which can cause papers with identical titles but different contents to overwrite each other, leading to ...

5.3CVSS5.1AI score0.00284EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2025/07/07 9:54 a.m.19 views

CVE-2025-3044 MD5 Hash Collision in run-llama/llama_index

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each othe...

5.3CVSS0.00284EPSS
SaveExploits1References2
OSV
OSV
added 2025/07/07 9:54 a.m.11 views

CVE-2025-3044 MD5 Hash Collision in run-llama/llama_index

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each othe...

5.3CVSS6.1AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/07/07 12:00 a.m.16 views

PT-2025-28148

Name of the Vulnerable Software and Affected Versions: llama index versions up to v0.12.22.post1 Description: A vulnerability in the ArxivReader class allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but...

5.3CVSS6AI score0.00284EPSS
SaveExploits1References14
Tenable Nessus
Tenable Nessus
added 2025/06/27 12:00 a.m.12 views

Siemens SCALANCE, RUGGEDCOM, SIPLUS, and SINEC RADIUS Protocol Forgery Attacks (CVE-2024-3596)

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify responses Access-Reject or Access-Accept using a chosen-prefix collision attack against MD5 Response Authenticator signature. This plugin only works with Tenable.ot. Please visit...

9CVSS7.1AI score0.14859EPSS
SaveExploits2References24
Tenable Nessus
Tenable Nessus
added 2025/06/25 12:00 a.m.8 views

RHEL 10 : krb5 (RHSA-2025:9418)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9418 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending password...

5.9CVSS6.9AI score0.00345EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/06/25 12:00 a.m.8 views

RHEL 9 : krb5 (RHSA-2025:9430)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9430 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords...

5.9CVSS6.9AI score0.00345EPSS
SaveExploits0References5
Amazon
Amazon
added 2025/06/24 12:00 a.m.18 views

Medium: qt5-qt3d

Issue Overview: A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to...

8.8CVSS6.7AI score0.0068EPSS
SaveExploits4
AlmaLinux
AlmaLinux
added 2025/06/24 12:00 a.m.13 views

Moderate: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the...

5.9CVSS5.8AI score0.00345EPSS
SaveExploits0References4
OSV
OSV
added 2025/06/24 12:00 a.m.12 views

ALSA-2025:9418 Moderate: krb5 security update

Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the network in unencrypted form. It allows clients and servers to authenticate to each other with the help of a trusted third party, the...

5.9CVSS7.3AI score0.00345EPSS
SaveExploits0References4
NVD
NVD
added 2025/06/11 5:15 p.m.18 views

CVE-2025-40915

Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens. That version of the module generates tokens as an MD5 of the process id, the current time, and a single call to the built-in rand function...

7CVSS0.00276EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/06/06 12:00 a.m.7 views

Fedora 43 : krb5 (2025-1c915db8a5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-1c915db8a5 advisory. Automatic update for krb5-1.21.3-6.fc43. Changelog Wed Jun 4 2025 Julien Rische - 1.21.3-6 - Do not block HMAC-MD4/5 in FIPS mode Resolves: rhbz2370259 -...

5.9CVSS6.9AI score0.00345EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
added 2025/06/05 12:00 a.m.12 views

VulnCheck KEV: CVE-2022-40843

The Tenda AC1200 V-W15Ev2 V15.11.0.101576 router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password...

4.9CVSS5.7AI score0.28802EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/30 12:53 a.m.28 views

CVE-2025-48925

The TeleMessage service through 2025-05-05 relies on the client side e.g., the TM SGNL app to do MD5 hashing, and then accepts the hash as the authentication credential...

4.3CVSS6.7AI score0.00263EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/30 12:53 a.m.26 views

CVE-2025-48931

The TeleMessage service through 2025-05-05 relies on MD5 for password hashing, which opens up various attack possibilities including rainbow tables with low computational effort...

3.2CVSS7.2AI score0.00092EPSS
SaveExploits0References1
Rows per page
Query Builder