AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.
wpDiscuz before 7.6.47 contains an email header injection vulnerability that allows attackers to manipulate mail recipients by injecting malicious data into the comment_author_email cookie.
IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote attacker to obtain sensitive information in cleartext in a communication channel that can be sniffed by unauthorized actors.
telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.
FreeRDP is a free implementation of the Remote Desktop Protocol.
IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in...
IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper enforcement of behavioral workflow.
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.
Broken access control in Elementor Website Builder through version 3.35.5 permits high-privileged, network-based WordPress users to exceed their intended authorization boundaries by exploiting incorrectly configured access control security levels. The missing authorization checks (CWE-862) allow a scoped integrity modification - no confidentiality or availability impact is indicated. With a CVSS score of 2.7 (Low), EPSS at 0.02% (4th percentile), no CISA KEV listing, and no public exploit identified at time of analysis, this vulnerability presents low urgency in practice despite the widespread deployment footprint of the plugin.