Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write
CVE-2026-103760
Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that allows unauthenticated rem
#advisory
共收录 23210 条相关情报。
← 返回所有主题Office-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_image
CVE-2025-71427
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and
: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows :...
CVE-2026-27874
: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-c
Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 ...
CVE-2026-55395
Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLoo
Cleartext transmission without a cryptographic integrity check in operator control unit to robot...
CVE-2026-55396
Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. ...
CVE-2026-71451
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. This issue affects Eas
Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows...
CVE-2026-55394
Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticat
Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of...
CVE-2026-102514
Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea co
Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 ...
CVE-2026-55393
Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLo
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...
CVE-2026-104286
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.
RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to...
CVE-2026-82357
RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An ob
Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to...
CVE-2026-102670
Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it.
The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by...
CVE-2026-102671
The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default.
Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through...
CVE-2026-14984
Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote u
Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2...
CVE-2026-14983
Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticat
IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds,...
CVE-2026-103484
IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbit
RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO (Service Data Object)...
CVE-2026-82358
RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO (Service Data Object) server implementation 'src
A component of one of the Motorola system applications was exported without permission, allowing...
CVE-2026-93832
A component of one of the Motorola system applications was exported without permission, allowing for the revocation of r
Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware...
CVE-2026-102370
Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do no
The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG...
CVE-2026-102628
The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in