#cwe-829

共收录 170 条相关情报。

← 返回所有主题
漏洞预警2026-05-08 发布INFO

PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP (Model Context Protocol) server (praisonai mcp serve) registers four file-handling tools by def...

CVE-2026-44336

PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP (Model Context Protocol) server (prais

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-08 发布INFO

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From versions 3.0.6 to before 3.8.15, electerm is vulnerable to arbitrary local code ex...

CVE-2026-43944

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From versions 3.0.6 to before

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-08 发布INFO

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.16, the runWidget function in src/app/widgets/load-widget.js const...

CVE-2026-43940

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.16, the r

历史摘要 · 未重新核验 · NVD

安全公告2026-05-07 发布INFO

CSS Parser: Improper Certificate Validation allows MITM injection of remote CSS content

CVE-2026-44312

### Summary The CSS Parser gem does not validate HTTPS connections, allowing a Man-in-the-Middle (MITM) attacker to inj

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-05 发布INFO

OpenClaw before 2026.4.10 contains a plugin trust bypass vulnerability that allows channel setup catalog lookups to resolve workspace plugin shadows before bundled channel plugi...

CVE-2026-43571

OpenClaw before 2026.4.10 contains a plugin trust bypass vulnerability that allows channel setup catalog lookups to reso

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-05 发布INFO

OpenClaw before 2026.4.9 contains an authentication bypass vulnerability allowing untrusted workspace plugins to be auto-enabled during non-interactive onboarding when provider ...

CVE-2026-43569

OpenClaw before 2026.4.9 contains an authentication bypass vulnerability allowing untrusted workspace plugins to be auto

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-01 发布INFO

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed par...

CVE-2026-43003

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes execu

历史摘要 · 未重新核验 · NVD

安全公告2026-04-28 发布INFO

OpenStack Ironic through 25.0.0 allows ipmitool execution in a non-default configuration that has...

CVE-2026-42510

OpenStack Ironic through 25.0.0 allows ipmitool execution in a non-default configuration that has a console interface.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-04-28 发布INFO

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

CVE-2026-42510

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-04-27 发布INFO

pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports w...

CVE-2026-6357

pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importin

历史摘要 · 未重新核验 · NVD