共收录 133 条相关情报。
← 返回所有主题CVE-2026-49462
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, custom
CVE-2026-62388
NLTK's pathsec.py security module defaults to ENFORCE=False (line 24), which means all 8 security validation functions o
CVE-2026-77348
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, the fix for CVE-2026-3340
CVE-2026-53507
oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post a review on every pull request
CVE-2026-53507
oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post a review on every pull request
CVE-2026-55581
mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Do
CVE-2026-77915
rConfig Core 8.0.0 before 8.2.13 contains an authentication bypass vulnerability that allows unauthenticated attackers t
CVE-2026-62388
NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit wa
CVE-2026-75926
Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through PostCSS, B
CVE-2026-53660
## Summary **Description** An Insecure Default Initialization of Resource (CWE-1188) issue in the OpenAM default config
CVE-2026-33921
The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver
CVE-2026-63563
Sharp and Toshiba Tec MFPs (multifunction printers) for a certain market have been shipped with the user authentication
CVE-2026-62416
Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, requir
CVE-2026-66066
Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.
CVE-2026-66066
Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.
CVE-2026-65881
Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.1
CVE-2026-9680
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP
CVE-2026-9680
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP
CVE-2026-55708
In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_local_data' and 'view_local_datas' commands of 'unboun
CVE-2026-47393
PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships a code-gene