Lucene search
K

6 matches found

NVD
NVD
added 2026/02/24 1:16 a.m.2 views

CVE-2026-25591

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to version 0.10.8-alpha.10, a SQL LIKE wildcard injection vulnerability in the /api/token/search endpoint allows authenticated users to cause denial of service through resource exhaustion by...

7.1CVSS0.00022EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/02/24 12:41 a.m.15 views

CVE-2026-25591 New API has an SQL LIKE Wildcard Injection DoS via Token Search

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to version 0.10.8-alpha.10, a SQL LIKE wildcard injection vulnerability in the /api/token/search endpoint allows authenticated users to cause denial of service through resource exhaustion by...

7.1CVSS0.00022EPSS
Exploits1References3
NVD
NVD
added 2018/10/08 3:29 p.m.9 views

CVE-2018-1000804

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL Antelope Query Language database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious A...

10CVSS9.8AI score0.10961EPSS
Exploits1References2
Prion
Prion
added 2018/10/08 3:29 p.m.12 views

Buffer overflow

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL Antelope Query Language database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious A...

10CVSS9.8AI score0.10961EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2018/10/08 3:0 p.m.40 views

CVE-2018-1000804

The CVE-2018-1000804 entry concerns contiki-ng version 4 with a Buffer Overflow in the AQL (Antelope Query Language) database engine that can enable Remote Code Execution on a Contiki-NG device. Attack requires the ability to run malicious AQL code (e.g., via SQL-like injection); no explicit expl...

10CVSS9.7AI score0.10961EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2018/10/08 3:0 p.m.9 views

CVE-2018-1000804

contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL Antelope Query Language database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious A...

9.8AI score0.10961EPSS
Exploits1References2
Rows per page
Query Builder