Lucene search
+L

3 matches found

OSV
OSV
added 2026/04/28 9:34 a.m.10 views

GHSA-QC4J-QJQX-VR58 Spring AI has a VectorStore FilterExpression Converter injection

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, keys and values are not properly escaped, leading to the ability to alter the query. Affected versions: Spring AI: 1.0.0...

8.6CVSS5.8AI score0.00394EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/28 6:3 a.m.5 views

CVE-2026-40967

In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages. In several cases, keys and values are not properly escaped, leading to the ability to alter the query. Affected versions: Spring AI: 1.0.0...

8.6CVSS5.2AI score0.00394EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2005/04/29 12:0 a.m.28 views

phpCOIN <= 1.2.2 Multiple SQL Injection Vulnerabilities

The remote host is running phpCOIN version 1.2.2 or older. These versions suffer from several SQL injection vulnerabilities due to their failure to properly sanitize input to the 'search' parameter of the 'index.php' script, the 'phpcoinsessid' parameter of the 'login.php' script and the 'id',...

7.5CVSS5.9AI score0.02732EPSS
SaveExploits3References3
Rows per page
Query Builder