#cwe-22

共收录 2701 条相关情报。

← 返回所有主题
漏洞预警2026-08-09 发布INFO

A security vulnerability has been detected in IncomeStreamSurfer roo-code-memory-bank-mcp-server up to 9dcb2fb5e6b65a35ac1983885a6d4e5621a0081e. This affects the function readMe...

CVE-2026-19325

A security vulnerability has been detected in IncomeStreamSurfer roo-code-memory-bank-mcp-server up to 9dcb2fb5e6b65a35a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A weakness has been identified in HelloGGX shadcn-vue-mcp up to e170e277b94235cde627803277fc8c41103a4d38. Affected by this issue is the function fs.promises.readFile of the file...

CVE-2026-19324

A weakness has been identified in HelloGGX shadcn-vue-mcp up to e170e277b94235cde627803277fc8c41103a4d38. Affected by th

历史摘要 · 未重新核验 · NVD

安全公告2026-08-09 发布INFO

A security flaw has been discovered in azer react-analyzer-mcp up to...

CVE-2026-19323

A security flaw has been discovered in azer react-analyzer-mcp up to 335f2a3585f265e2e88352b59b10d3b478d678b0. Affected

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-09 发布MEDIUM

A security flaw has been discovered in azer react-analyzer-mcp up to 335f2a3585f265e2e88352b59b10d3b478d678b0. Affected by this vulnerability is the function generateProjectDocs...

CVE-2026-19323

CVE-2026-19323 是 azer 开发的 react-analyzer-mcp 工具中一个路径遍历漏洞。该漏洞影响 src/index.ts 文件中的 generateProjectDocs 函数,攻击者通过操纵 projectN

历史摘要 · 未重新核验 · NVD

安全公告2026-08-08 发布INFO

A flaw has been found in abrinsmead mindpilot-mcp 0.5.0. Affected by this issue is some unknown...

CVE-2026-19287

A flaw has been found in abrinsmead mindpilot-mcp 0.5.0. Affected by this issue is some unknown functionality of the com

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

A vulnerability has been found in astralisone rive-mcp-server-core up to...

CVE-2026-19288

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-08 发布INFO

A vulnerability was detected in aaronsb memory-graph up to...

CVE-2026-19285

A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vu

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-08 发布INFO

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of the file packages/mcp-server/s...

CVE-2026-19288

A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e. This

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-08 发布INFO

A flaw has been found in abrinsmead mindpilot-mcp 0.5.0. Affected by this issue is some unknown functionality of the component HistoryService. This manipulation of the argument ...

CVE-2026-19287

A flaw has been found in abrinsmead mindpilot-mcp 0.5.0. Affected by this issue is some unknown functionality of the com

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-08 发布INFO

A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomai...

CVE-2026-19285

A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vu

历史摘要 · 未重新核验 · NVD

安全公告2026-08-08 发布INFO

A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the...

CVE-2026-19270

A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function get_journey/delete_jo

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-08 发布INFO

A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function get_journey/delete_journey/analyze_journey/usage_stats of the file src/journey...

CVE-2026-19270

A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function get_journey/delete_jo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布CRITICAL

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to 3.31.0, the runtime-...

CVE-2026-47243

CVE-2026-47243 是 Kata Containers 项目中一个影响 runtime-rs standalone virtio-fs 路径的严重漏洞,源于该配置下宿主机的 virtiofsd 进程以 root 权限运行,并且使用

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session...

CVE-2026-19016

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session:write}} ACL permission

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-...

CVE-2026-50540

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result...

CVE-2026-47661

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's `/$result...

CVE-2026-47659

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session:write}} ACL permission for session deletion operations submitted through the tr...

CVE-2026-19016

Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce the {{session:write}} ACL permission

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames

CVE-2026-63222

### Impact In affected versions, calling `UploadedFile::move()` **without a second argument** uses the client-provided f

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before being used to construct on-dis...

CVE-2026-71557

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference name

历史摘要 · 未重新核验 · NVD