A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the...
CVE-2026-15618
A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecComma
2026-07-14 归档
今日共收录 1138 条安全情报，包含 379 个 CVE，396 篇安全通告，以及 80 篇研究论文。
← 返回归档列表Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer...
CVE-2026-58101
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2
A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the...
CVE-2026-15619
A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function web_fetch of the fi
FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack...
CVE-2026-62239
FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack vulnerability in the download_and
OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in...
CVE-2026-62194
OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install commands that
OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where...
CVE-2026-62196
OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can s
A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the...
CVE-2026-15607
A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the fi
OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in...
CVE-2026-62198
OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allo
A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function...
CVE-2026-15605
A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function ArtifactManifestEntry.download
OpenClaw versions before 2026.6.1 contain a flaw in host exec environment filtering that could...
CVE-2026-62200
OpenClaw versions before 2026.6.1 contain a flaw in host exec environment filtering that could allow Git ext transport t
Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (...
CVE-2026-57855
Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api
OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss...
CVE-2026-62199
OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup va
OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the...
CVE-2026-62195
OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback feature th
OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in...
CVE-2026-62191
OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in message mutation handling th
OpenClaw versions 2026.6.5 before 2026.6.9 contain a vulnerability in the plugin install wrappers...
CVE-2026-62193
OpenClaw versions 2026.6.5 before 2026.6.9 contain a vulnerability in the plugin install wrappers that could skip the in
PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access...
CVE-2026-61458
PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-
OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync...
CVE-2026-62189
OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower
OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI...
CVE-2026-62186
OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model override
OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per...
CVE-2026-62187
OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A low
OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in...
CVE-2026-62192
OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that a