A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element...
CVE-2026-108683
A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function
2026-10-12 归档
今日共收录 1168 条安全情报，包含 403 个 CVE，452 篇安全通告，以及 67 篇研究论文。
← 返回归档列表mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP...
CVE-2026-108859
mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote una
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated...
CVE-2026-108866
JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated users to read any accou
A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function...
CVE-2026-108684
A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/
APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows...
CVE-2026-108862
APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows...
CVE-2026-108863
Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attack
A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the...
CVE-2026-108682
A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /
Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to...
CVE-2026-108852
Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links
UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any...
CVE-2026-108855
UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user t
Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any...
CVE-2026-108854
Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any authenticated enabled user
thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the...
CVE-2026-108839
thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the v1 API POST /v1/inputs
UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows...
CVE-2026-108856
UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppK
Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that...
CVE-2026-108850
Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated at
phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server...
CVE-2026-108851
phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faq_search tool that allows MCP
Easy!Appointments through 1.6.0 contains an authorization bypass vulnerability in Booking:...
CVE-2026-108758
Easy!Appointments through 1.6.0 contains an authorization bypass vulnerability in Booking::register() that allows unauth
LlamaFarm through 0.0.34 contains an insecure default configuration that binds its...
CVE-2026-108760
LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0
GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys...
CVE-2026-108754
GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger
CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low...
CVE-2026-108697
CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to lis
京ICP证080047号[京ICP备08010314号-6]
京ICP证080047号[京ICP备08010314号-6]
京网文〔2020〕6051-1195号
京网文〔2020〕6051-1195号