990823 matches found
CVE-2026-73081 Activepieces: Remote Code Execution via Command Injection in Code Step Name
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of...
CVE-2026-21399
Heap-based buffer overflow for the IntelR Open Volume Kernel Library IntelR Open VKL library maintained by intelR before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may...
CVE-2026-21399
Heap-based buffer overflow for the IntelR Open Volume Kernel Library IntelR Open VKL library maintained by intelR before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may...
EUVD-2026-56515
Heap-based buffer overflow for the IntelR Open Volume Kernel Library IntelR Open VKL library maintained by intelR before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may...
CVE-2026-21399
Heap-based buffer overflow for the IntelR Open Volume Kernel Library IntelR Open VKL library maintained by intelR before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may...
CVE-2026-21399
The CVE affects Intel Open Volume Kernel Library (Intel Open VKL) prior to version 2.0.2, with a heap-based buffer overflow in the library component. The issue occurs in Ring 3 (user applications) and can allow a Denial of Service when an authenticated local user with low attack complexity can tr...
CVE-2026-19078
A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the grant approval handler is not properly validated. A remote attacker can craft a malicious URL that, when approved or denied by an authenticated user, redirects them to an...
CVE-2026-19078
CVE-2026-19078 affects the oauth-server component. The open redirect occurs when the then parameter in the grant-approval handler is not properly validated, allowing an authenticated user to be redirected to an attacker-controlled site. Impact could enable phishing to steal sensitive information....
CVE-2026-19078 Ose-oauth-server: oauth-server: open redirect vulnerability enables phishing via unvalidated parameter.
A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the grant approval handler is not properly validated. A remote attacker can craft a malicious URL that, when approved or denied by an authenticated user, redirects them to an...
CVE-2026-19078 Ose-oauth-server: oauth-server: open redirect vulnerability enables phishing via unvalidated parameter.
A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the grant approval handler is not properly validated. A remote attacker can craft a malicious URL that, when approved or denied by an authenticated user, redirects them to an...
EUVD-2026-56228
A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the grant approval handler is not properly validated. A remote attacker can craft a malicious URL that, when approved or denied by an authenticated user, redirects them to an...
CVE-2026-19078
A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the grant approval handler is not properly validated. A remote attacker can craft a malicious URL that, when approved or denied by an authenticated user, redirects them to an...
CVE-2026-16336
A flaw was found in Trino's OAuth2/OIDC component. A remote attacker can exploit this vulnerability by manipulating the redirecturi argument, leading to an open redirect. This could allow an attacker to redirect users to malicious websites, potentially enabling phishing attacks or credential thef...
CVE-2026-12072 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-12074 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-12075 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-6HM5-JGCP-P838 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-QVV7-CG9C-W4X3 vulnerabilities
Vulnerabilities for packages: open-webui...
