A security flaw has been discovered in egtai gmx-vmd-mcp up to 0.1.0. This issue affects the...
CVE-2026-7215
A security flaw has been discovered in egtai gmx-vmd-mcp up to 0.1.0. This issue affects the function launch_vmd_gui_too
2026-04-28 归档
今日共收录 1050 条安全情报，包含 258 个 CVE，457 篇安全通告，以及 29 篇研究论文。
← 返回归档列表A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the...
CVE-2026-7218
A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function is_cmd_string_vali
A security vulnerability has been detected in Deepractice PromptX up to 2.4.0. The affected...
CVE-2026-7217
A security vulnerability has been detected in Deepractice PromptX up to 2.4.0. The affected element is the function read
A vulnerability was detected in ef10007 MLOps_MCP 1.0.0. This impacts an unknown function of the...
CVE-2026-7213
A vulnerability was detected in ef10007 MLOps_MCP 1.0.0. This impacts an unknown function of the file fastmcp_server.py
A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4. This affects...
CVE-2026-7212
A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4. This affects an unknown function of
A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the...
CVE-2026-7211
A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight...
CVE-2026-20766
An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras.
A vulnerability was identified in duartium papers-mcp-server...
CVE-2026-7205
A vulnerability was identified in duartium papers-mcp-server 9ceb3812a6458ba7922ca24a7406f8807bc55598. Impacted is the f
A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the...
CVE-2026-7206
A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extract_to_js
A command injection vulnerability exists in the web server of specific firmware versions of...
CVE-2026-32649
A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this...
CVE-2026-7200
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is some unknown
A local attacker on the same host as the application may be able to take control of the directory...
CVE-2026-40973
A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTe
OpenClaw versions 2026.2.6 through 2026.3.24 contain a path traversal vulnerability in the Feishu...
CVE-2026-41363
OpenClaw versions 2026.2.6 through 2026.3.24 contain a path traversal vulnerability in the Feishu extension resolveUploa
OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in...
CVE-2026-41366
OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in appendLocalMediaParentRoots that all
OpenClaw before 2026.3.31 contains a path traversal vulnerability in ACP dispatch that allows...
CVE-2026-41370
OpenClaw before 2026.3.31 contains a path traversal vulnerability in ACP dispatch that allows attackers to read arbitrar
OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq...
CVE-2026-41368
OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails
Spring Boot's Cassandra auto-configuration does not perform hostname verification when...
CVE-2026-40974
Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to
Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not...
CVE-2026-40975
Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not affected. ${random.int} an
A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an...
CVE-2026-7196
A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an unknown function of the fil
OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy...
CVE-2026-41367
OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord butto