|
3671
|
7.3 |
HIGH
Network
|
-
|
-
|
A vulnerability was identified in Sinaptik AI PandasAI up to 0.1.4. Affected by this issue is the function delete_question_and_answers/delete_docs/update_question_answer/update_docs/get_relevant_ques…
|
CWE-74 CWE-89
Injection SQL Injection
|
CVE-2026-4996
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3672
|
7.3 |
HIGH
Network
|
-
|
-
|
Una vulnerabilidad fue identificada en Sinaptik AI PandasAI hasta 0.1.4. Afectada por este problema es la función delete_question_and_answers/delete_docs/update_question_answer/update_docs/get_releva…
|
CWE-74 CWE-89
Injection SQL Injection
|
CVE-2026-4996
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3673
|
5.3 |
MEDIUM
Network
|
-
|
-
|
A security flaw has been discovered in Sinaptik AI PandasAI up to 3.0.0. This affects the function is_sql_query_safe of the file pandasai/helpers/sql_sanitizer.py. Performing a manipulation results i…
|
CWE-22
Path Traversal
|
CVE-2026-4997
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3674
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Una falla de seguridad ha sido descubierta en Sinaptik AI PandasAI hasta 3.0.0. Esto afecta a la función is_sql_query_safe del archivo pandasai/helpers/sql_sanitizer.py. Realizar una manipulación res…
|
CWE-22
Path Traversal
|
CVE-2026-4997
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3675
|
7.3 |
HIGH
Network
|
-
|
-
|
A weakness has been identified in Sinaptik AI PandasAI up to 3.0.0. This vulnerability affects the function CodeExecutor.execute of the file pandasai/core/code_execution/code_executor.py of the compo…
|
CWE-74 CWE-94
Injection Code Injection
|
CVE-2026-4998
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3676
|
7.3 |
HIGH
Network
|
-
|
-
|
Se ha identificado una debilidad en Sinaptik AI PandasAI hasta la versión 3.0.0. Esta vulnerabilidad afecta a la función CodeExecutor.execute del archivo pandasai/core/code_execution/code_executor.py…
|
CWE-74 CWE-94
Injection Code Injection
|
CVE-2026-4998
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3677
|
5.3 |
MEDIUM
Local
|
-
|
-
|
A vulnerability was identified in kazuph mcp-docs-rag up to 0.5.0. Affected is the function cloneRepository of the file src/index.ts of the component add_git_repository/add_text_file. The manipulatio…
|
CWE-77 CWE-78
Command Injection OS Command
|
CVE-2026-5007
|
2026-04-25 01:36 |
2026-03-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3678
|
5.3 |
MEDIUM
Local
|
-
|
-
|
Se identificó una vulnerabilidad en kazuph mcp-docs-rag hasta la versión 0.5.0. La función afectada es cloneRepository del archivo src/index.ts del componente add_git_repository/add_text_file. La man…
|
CWE-77 CWE-78
Command Injection OS Command
|
CVE-2026-5007
|
2026-04-25 01:36 |
2026-03-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3679
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was detected in elecV2 elecV2P up to 3.8.3. This vulnerability affects the function runJSFile of the file /webhook of the component JSON Parser. Performing a manipulation of the argum…
|
CWE-74 CWE-94
Injection Code Injection
|
CVE-2026-5011
|
2026-04-25 01:36 |
2026-03-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3680
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A security vulnerability has been detected in z-9527 admin up to 72aaf2dd05cf4ec2e98f390668b41e128eec5ad2. This issue affects the function uploadFile of the file /server/utils/upload.js of the compon…
|
CWE-22
Path Traversal
|
CVE-2026-4999
|
2026-04-25 01:36 |
2026-03-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|