261986 matches found
CVE-2026-70482 Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.0, when ENABLEOAUTHTOKENEXCHANGE=True, /oauth/provider/token/exchange accepts a raw provider access token and validates it by calling the provider userinfo endpoint without confirming which...
CVE-2026-70476
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, several organization billing endpoints in packages/server/src/enterprise/routes/organization.route.ts and packages/server/src/enterprise/controllers/organization.controller.ts accept...
CVE-2026-13229
Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint...
CVE-2017-20242
CVE-2017-20242 affects Keysight IxChariot Endpoint prior to 9.5.102. The vulnerability is a stack-based buffer overflow in the endpoint, exploitable by an unauthenticated remote attacker over the network via a specially crafted packet, potentially crashing the endpoint or allowing arbitrary code ...
CVE-2026-66277
creationtimestamp| type| source ---|---|--- 2026-08-04 18:45:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/2yf3fvwedeq55...
CVE-2026-47781 pdm: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing
PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-controlled file in an untrusted repository checkout to execute arbitrary Python code befo...
CVE-2026-47781
CVE-2026-47781 affects PDM up to v2.26.9, where Core.init() calls load_plugins() and adds the project-local .pdm-plugins via site.addsitedir(). This causes .pth files to be processed, allowing attacker-controlled content in an untrusted repository checkout to execute arbitrary Python code before ...
CVE-2026-66275
creationtimestamp| type| source ---|---|--- 2026-08-04 18:33:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/ff4uaoe56so2a...
CVE-2026-58072
creationtimestamp| type| source ---|---|--- 2026-08-04 18:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbmu54swv2u 2026-08-05 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-veeam-1 2026-08-05 13:05:27+00:00| seen|...
Uncontrolled Recursion
Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Uncontrolled Recursion via GEOSGeometry when parsing deeply nested GEOMETRYCOLLECTION objects provided as well-known text WKT,...
CVE-2026-47623
creationtimestamp| type| source ---|---|--- 2026-08-04 18:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2bly5qs5x5ynn 2026-08-08 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msl6vsra472o...
CVE-2026-69255
creationtimestamp| type| source ---|---|--- 2026-08-04 18:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbmftr7f42o 2026-08-06 20:45:21+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-flowise...
CVE-2026-70474
Flowise is a drag-and-drop user interface for building customized large language model LLM flows. Prior to 3.1.3, Flowise has three OAuth2 credential endpoints that look up credentials by id alone with no workspaceId filter. The authorize, callback, and refresh handlers query the Credential table...
CVE-2026-70471 Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
Flowise is a drag-and-drop user interface for building customized large language model LLM flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetche...
CVE-2026-70471 Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
Flowise is a drag-and-drop user interface for building customized large language model LLM flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetche...
CVE-2026-24253
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering...
CVE-2026-69263
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 blocked -y and --yes flags on npx, but packages/components/nodes/tools/MCP/core.ts denied only PATH, LDLIBRARYPATH, DYLDLIBRARYPATH, and NODEOPTIONS by exact...
CVE-2026-64634
A vulnerability allowing local privilege escalation to the Reporter service context...