All CVEs — page 382 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
LightLLM through 1.2.0 allows unauthenticated attackers to execute arbitrary code via a deserialization vulnerability in the remote_infer_images method with allow_pickle enabled.
LightLLM 1.2.0 and earlier allows unauthenticated access to critical reinforcement learning control endpoints that can halt inference operations and wedge workers, enabling disruption of AI model serving without any authentication.
MQTT WebSocket setter ABI mismatch allows memory disclosure or crashes, potentially leading to information leakage or service disruption. This vulnerability affects the way MQTT handles WebSocket connections and can be exploited through improper data handling in the ABI interface.
A SQL injection vulnerability exists in SOPLOG versions before 2026.9.4.1, allowing attackers to execute arbitrary SQL commands and potentially gain full database access.
This flaw allows SQL injection in the Media Library Assistant version 3.41 and earlier, enabling an attacker to execute arbitrary SQL commands and potentially gain full database access.