13379 matches found
CVE-2026-7817 pgAdmin 4: Local file inclusion and server-side request forgery in LLM API configuration endpoints
Local file inclusion LFI and server-side request forgery SSRF vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-supplied apikeyfile and apiurl preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by...
CVE-2026-7817
Local file inclusion LFI and server-side request forgery SSRF vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-supplied apikeyfile and apiurl preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by...
CVE-2026-7817 pgAdmin 4: Local file inclusion and server-side request forgery in LLM API configuration endpoints
Local file inclusion LFI and server-side request forgery SSRF vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-supplied apikeyfile and apiurl preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by...
Important: Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.3 (CUDA)
Red Hat AI Inference Server Model Optimization Tools 3.3.3 CUDA is now available. Red Hat® AI Inference Server Model Optimization Tools...
MINI-FPV5-35PG-W3R6
Bulletin has no description...
MINI-WPGV-MF36-WF36
Bulletin has no description...
MINI-X3HP-JRPP-4XRC
Bulletin has no description...
MINI-W358-CGG3-96RJ
Bulletin has no description...
MINI-V362-M7PM-C3PH
Bulletin has no description...
MINI-VV64-3C3V-F4RH
Bulletin has no description...
MINI-MH7M-55VP-JQF2
Bulletin has no description...
Directory Traversal
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Directory Traversal via the uploadmodel function. An attacker can overwrite or delete arbitrary files on the server by uploading files with specially crafted filenames containing directory traversal sequences...
MINI-64CX-G2CR-3HGW
Bulletin has no description...
MINI-36MP-326G-8HRW
Bulletin has no description...
MINI-3C4V-M4GV-R66F
Bulletin has no description...
MINI-48PF-3545-9RF6
Bulletin has no description...
EUVD-2026-28639
PraisonAI MCP tools/call path-traversal = RCE via Python .pth injection...
MINI-55HP-76VX-P3VG
Bulletin has no description...