A security vulnerability has been detected in mastergo-design mastergo-magic-mcp up to 0.2.0. The affected element is the function execute of the file mastergo/component-workflo...

CVE-2026-15751

A security vulnerability has been detected in mastergo-design mastergo-magic-mcp up to 0.2.0. The affected element is th

历史摘要 · 未重新核验 · NVD

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone serve restic --private-repos enforces autho...

CVE-2026-59733

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

历史摘要 · 未重新核验 · NVD

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone archive extract can write extracted files o...

CVE-2026-59732

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

历史摘要 · 未重新核验 · NVD

jadx is a Dex to Java decompiler. From 1.5.2 to 1.5.5, a malicious .xapk file can cause jadx to write attacker-controlled archive entry contents outside the intended XAPK plugin...

CVE-2026-54684

jadx is a Dex to Java decompiler. From 1.5.2 to 1.5.5, a malicious .xapk file can cause jadx to write attacker-controlle

历史摘要 · 未重新核验 · NVD

mastergo-design mastergo-magic-mcp mcp__getComponentGenerator component-workflow.md execute path traversal

CVE-2026-15751

A security vulnerability has been detected in mastergo-design mastergo-magic-mcp up to 0.2.0. The affected element is th

历史摘要 · 未重新核验 · OSV.dev

jadx: XAPK archive entries with absolute paths can plant drop-in plugins and achieve code execution on the next jadx run

CVE-2026-54684

jadx is a Dex to Java decompiler. From 1.5.2 to 1.5.5, a malicious .xapk file can cause jadx to write attacker-controlle

历史摘要 · 未重新核验 · OSV.dev

rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories

CVE-2026-59733

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

历史摘要 · 未重新核验 · OSV.dev

rclone archive extract allows S3 destination prefix escape via crafted archive paths

CVE-2026-59732

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1

历史摘要 · 未重新核验 · OSV.dev

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path...

CVE-2026-48319

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit

历史摘要 · 未重新核验 · GitHub Advisory

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path...

CVE-2026-48318

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit

历史摘要 · 未重新核验 · GitHub Advisory

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path...

CVE-2026-48338

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit

历史摘要 · 未重新核验 · GitHub Advisory

The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive extraction can create files and links outside the target directory. When extracting an ...

CVE-2026-53486

The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive extraction can create files an

历史摘要 · 未重新核验 · NVD

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attac...

CVE-2026-48338

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit

历史摘要 · 未重新核验 · NVD

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the co...

CVE-2026-48319

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit

历史摘要 · 未重新核验 · NVD

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attac...

CVE-2026-48318

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. This issue affects the function execute of the file src/tools/get-c2d.ts of the component ...

CVE-2026-15749

A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. This issue affects the function e

历史摘要 · 未重新核验 · NVD

mastergo-design mastergo-magic-mcp mcp__C2d get-c2d.ts execute path traversal

CVE-2026-15749

A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. This issue affects the function e

历史摘要 · 未重新核验 · OSV.dev

FacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to RCE

## Summary `FacturaScripts\Core\UploadedFile::move($destiny, $destinyName)` concatenates `$destiny` and `$destinyName`

历史摘要 · 未重新核验 · GitHub Advisory

Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode

CVE-2026-54629

## Summary Anyquery's `server` mode lacks input sanitization and access control over its built-in SQLite virtual table m

历史摘要 · 未重新核验 · GitHub Advisory

Animate is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the conte...

CVE-2026-48350

Animate is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability t

历史摘要 · 未重新核验 · NVD