|
4021
|
2.6 |
LOW
Adjacent
|
-
|
-
|
A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. This issue affects the function PIL.Image.tobytes of the file libs/chatchat-server/chatchat/webui_pages/dialogue/dialogue.py …
|
CWE-327
CWE-328
Use of a Broken or Risky Cryptographic Algorithm
Use of Weak Hash
|
CVE-2026-7845
|
2026-05-6 01:16 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4022
|
6.3 |
MEDIUM
Adjacent
|
-
|
-
|
A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3. This vulnerability affects the function files/list_files/retrieve_file/retrieve_file_content/delete_file of the file l…
|
CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function
|
CVE-2026-7844
|
2026-05-6 01:16 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4023
|
- |
|
-
|
-
|
Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling.
In 'Elixir.Phoenix.Trans…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2026-32689
|
2026-05-6 01:16 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4024
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file…
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2025-70067
|
2026-05-6 01:16 |
2026-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4025
|
4.9 |
MEDIUM
Network
|
sonicwall
|
sonicos
|
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-0206
|
2026-05-6 01:12 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4026
|
6.8 |
MEDIUM
Adjacent
|
sonicwall
|
sonicos
|
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
|
CWE-35
Path Traversal: '.../...//'
|
CVE-2026-0205
|
2026-05-6 01:12 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4027
|
8.0 |
HIGH
Adjacent
|
sonicwall
|
sonicos
|
A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.
|
CWE-306
CWE-1390
Missing Authentication for Critical Function
Weak Authentication
|
CVE-2026-0204
|
2026-05-6 01:11 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4028
|
5.5 |
MEDIUM
Local
|
wireshark
|
wireshark
|
IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-6525
|
2026-05-6 00:42 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4029
|
7.8 |
HIGH
Local
|
entechtaiwan
|
tvicport
|
An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x80002008 requests.
|
CWE-20
CWE-269
Improper Input Validation
Improper Privilege Management
|
CVE-2026-30769
|
2026-05-5 23:31 |
2026-04-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4030
|
4.3 |
MEDIUM
Network
|
jenkins
|
azure_ad
|
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.
|
CWE-601
Open Redirect
|
CVE-2026-42525
|
2026-05-5 23:25 |
2026-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
