15834 matches found
CVE-2026-70639 llama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cpp
llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper where the bench1model function fails to validate the model context pointer before dereferencing it. Attackers can supply a malicious, corrupt, or truncated model file to trigger ...
CVE-2026-70639
llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper where the bench1model function fails to validate the model context pointer before dereferencing it. Attackers can supply a malicious, corrupt, or truncated model file to trigger ...
CVE-2026-70639
CVE-2026-70639 affects llama.cpp builds b1886–b7445, specifically the LLaMA-Android JNI wrapper. The vulnerability arises because bench_1model() does not validate the model context pointer before dereferencing it, causing a null pointer dereference. An attacker can supply a malformed, corrupt, or...
CVE-2026-70639
llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper where the bench1model function fails to validate the model context pointer before dereferencing it. Attackers can supply a malicious, corrupt, or truncated model file to trigger ...
CVE-2026-18258 Authorization Bypass Through User-Controlled Key in eScriptorium
Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allows a remote authenticated user to read, modify and delete other users' transcription content via primary keys supplied in the request body, which are...
CVE-2026-18258
CVE-2026-18258 affects Scripta/eScriptorium up to version 26.04.1, impacting the Line, LineTranscription, VirtualCollection, tag and process API endpoints. The root cause is authorization bypass where a remote authenticated user can read, modify, and delete other users’ transcription content. Thi...
CVE-2026-18277 Missing Authorization in eScriptorium
Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to grant themselves access to another user's private OCR model and to revoke any user's OCR model access via a POST request, because the ownership check is...
CVE-2026-18277 Missing Authorization in eScriptorium
Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to grant themselves access to another user's private OCR model and to revoke any user's OCR model access via a POST request, because the ownership check is...
CVE-2026-18277
Technical details about CVE-2026-18277 are not publicly available in the provided documents. Monitor for updates from the vendor and CVE records.
CVE-2026-18277 Missing Authorization in eScriptorium
Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to grant themselves access to another user's private OCR model and to revoke any user's OCR model access via a POST request, because the ownership check is...
EUVD-2026-54092
Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote authenticated user to grant themselves access to another user's private OCR model and to revoke any user's OCR model access via a POST request, because the ownership check is...
MINI-48HF-W95Q-MG55
Bulletin has no description...
MINI-89WH-8F5C-6QVP
Bulletin has no description...
MINI-44MF-V23G-47M9
Bulletin has no description...
Security update for nodejs22
This update for nodejs22 fixes the following issues: Update to 22.23.2. CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks bsc1272882. CVE-2026-56846: HTTP/2 retained headers can bypass maxSessionMemory limits...
CVE-2026-18993 NousResearch hermes-agent Memory Toolset model_tools.py access control
A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/modeltools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The explo...
EUVD-2026-53706
A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/modeltools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The explo...
CVE-2026-18993 NousResearch hermes-agent Memory Toolset model_tools.py access control
A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/modeltools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The explo...
CVE-2026-18993
The CVE-2026-18993 entry relates to NousResearch hermes-agent, specifically the Memory Toolset component, file hermes-agent/model_tools.py. The description indicates improper access controls in this functionality and an exploitable condition that can be triggered remotely. Affected versions inclu...