vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows...
CVE-2026-116181
vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash
#severity:high
共收录 5396 条相关情报。
← 返回所有主题vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API...
CVE-2026-116179
vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/
vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that...
CVE-2026-116177
vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated a
vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote...
CVE-2026-116178
vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engi
vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the...
CVE-2026-116175
vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path call
vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote...
CVE-2026-116173
vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate Engi
SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath...
CVE-2026-116171
SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath because the Windows ex
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust...
CVE-2026-116174
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and Generat
vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows...
CVE-2026-116176
vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outb
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust...
CVE-2026-116172
vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC converter that allow
Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4 contains a missing authorization...
CVE-2026-116165
Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4 contains a missing authorization vulnerability on MongoDB de
SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the...
CVE-2026-116167
SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated /check-auth page tha
SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS setting but never enforces it,...
CVE-2026-116166
SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS setting but never enforces it, so the kernel port kee
Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi...
CVE-2026-114191
Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-wooc
Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi...
CVE-2026-114704
Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi allows Object Injection.T
yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows...
CVE-2026-116016
yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-
Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to...
CVE-2026-116019
Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public
Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the...
CVE-2026-116009
Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to wr
The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation...
CVE-2026-110018
The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordP
Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that...
CVE-2026-116011
Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows remote unauthentica