20537 matches found
CVE-2026-42097
Sparx Pro Cloud Server requires authentication based on requested URL. An attacker can omit the "model" query parameter and send the model name only in the binary blob in POST request allowing SQL query execution without authentication. The vendor was notified early about this vulnerability, but...
CVE-2026-4372
A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious config.json file containing the attnimplementationinternal field set to an attacker-controlled HuggingFac...
CVE-2026-40836
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the inmessage model due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can result in a...
CVE-2026-44555
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, Open WebUI supports model composition via basemodelid: a user-defined model e.g., "Cheap Assistant" can reference an existing base model e.g., "gpt-4-turbo-restricted" that provides...
CVE-2026-44556
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the /responses endpoint in the OpenAI router accepts any authenticated user and forwards requests directly to upstream LLM providers without enforcing per-model access control. While...
MINI-GXRJ-495J-4QR2
Bulletin has no description...
MINI-48HM-9HRG-XV85
Bulletin has no description...
MINI-MMRV-P78X-P8M7
Bulletin has no description...
MINI-RP28-R432-2H36
Bulletin has no description...
MINI-P48G-Q357-M8Q9
Bulletin has no description...
MINI-QF87-2HMR-M275
Bulletin has no description...
MINI-MQ87-V6VH-JJVR
Bulletin has no description...
MINI-P795-C2MV-V765
Bulletin has no description...
MINI-75GC-M58V-QMPP
Bulletin has no description...
MINI-PC2F-J2J3-68R4
Bulletin has no description...
MINI-P33Q-V923-HM9C
Bulletin has no description...
MINI-FP3J-R68F-M529
Bulletin has no description...
MINI-995X-C98F-P32M
Bulletin has no description...