共收录 93 条相关情报。
← 返回所有主题CVE-2026-115522
Exposure of Resource to Wrong Sphere (CWE-668) in FileArtifactService in Google Agent Development Kit (ADK) for Python (
CVE-2026-62204
## Summary `installBazaarPlugin` (and the equivalent endpoints for widgets/icons/templates/themes) accept `packageName`
CVE-2026-57144
PraisonAI is a multi-agent teams system. From version 4.5.110 to before version 4.6.61, praisonai.sandbox.SandlockSandbo
CVE-2026-112936
filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock v
CVE-2026-106354
Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cro
CVE-2026-104073
NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged u
CVE-2026-105754
## Affected - **Ecosystem / package:** pip / `vllm` - **Affected versions:** vLLM ≤ 0.25.1 (confirmed on 0.25.1, commit
CVE-2026-105754
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint
CVE-2026-105746
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos
CVE-2026-102262
Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attac
CVE-2026-92940
Summary vm2 3.11.6 exposes the host process's real `https.globalAgent` when a `NodeVM` is explicitly allowed to require
CVE-2026-102125
The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it.
CVE-2026-91788
When implementing the JavaScript interface, Foxit PDF Editor/Reader did not perform the attribute authorization checks r
CVE-2026-92706
Dark Reader is an accessibility browser extension that makes web pages colors dark. Prior to 4.9.126, a website can caus
CVE-2026-92706
Dark Reader is an accessibility browser extension that makes web pages colors dark. Prior to 4.9.126, a website can caus
CVE-2026-86551
The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address
CVE-2026-86551
该漏洞影响 Z80Ultra (NX741J) 产品，本质是一个本地信息泄露问题。设备在 Android 的 Settings.Secure 数据库中保留了一个只读字段 factory_mac_address，用于存放出厂的 Wi-Fi M
CVE-2026-54495
The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant wh
CVE-2026-54504
MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13
CVE-2026-54504
MCP Documentation Server is a local-first document management and semantic search server for AI coding agents. From 1.13