Lucene search
K

9 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/07 4:35 p.m.1 views

CVE-2026-30859

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, mod...

5.3CVSS5.8AI score0.00071EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/07 4:35 p.m.24 views

CVE-2026-30859 WeKnora: Broken Access Control - Cross-Tenant Data Exposure

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, mod...

5.3CVSS0.00071EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.1 views

PT-2025-39169

Name of the Vulnerable Software and Affected Versions OnePlus OxygenOS versions 12 through 15 Description A critical security issue exists in OnePlus devices running OxygenOS 12 through 15. This flaw allows any installed application to read SMS/MMS data and metadata from the system Telephony...

8.2CVSS7.3AI score0.00179EPSS
Exploits0References52
RedhatCVE
RedhatCVE
added 2025/05/22 7:7 p.m.5 views

CVE-2021-20630

Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Phone Messages via unspecified vectors...

4.3CVSS6.7AI score0.00227EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.0 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18.2 and Apple iPadOS version 18.2, where an application may be able ...

4CVSS7AI score0.00062EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/09/05 12:0 a.m.2 views

PT-2023-22920 · Unknown · Inboundsmshandler

Name of the Vulnerable Software and Affected Versions: InboundSmsHandler versions prior to SMR Sep-2023 Release 1 Description: The issue allows local attackers to access certain message data due to an Exposure of Sensitive Information vulnerability in InboundSmsHandler. This vulnerability enables...

4CVSS3.9AI score0.00122EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:25 a.m.1 views

SUSE CVE-2018-14361

An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data...

9.8CVSS7AI score0.00401EPSS
Exploits0References10
OSV
OSV
added 2018/07/17 5:29 p.m.0 views

UBUNTU-CVE-2018-14361

An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data...

9.8CVSS7.3AI score0.00401EPSS
Exploits0References5
OSV
OSV
added 2018/07/17 5:29 p.m.1 views

DEBIAN-CVE-2018-14361

An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data...

9.8CVSS8.5AI score0.00401EPSS
Exploits0References1
Rows per page
Query Builder