#cwe-918

共收录 2023 条相关情报。

← 返回所有主题
漏洞预警2026-08-09 发布LOW

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intende...

CVE-2026-12372

CVE-2026-12372 是 NLTK(自然语言工具包)中 `nltk.pathsec.validate_network_url()` 函数的一个服务端请求伪造(SSRF)漏洞。该函数本意是通过拒绝内部网络地址来防止 SSRF,但其防护

历史摘要 · 未重新核验 · NVD

安全公告2026-08-09 发布INFO

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get...

CVE-2026-19369

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability...

CVE-2026-19367

A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functional

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-09 发布INFO

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component add_attachment_from_public_url. The m...

CVE-2026-19369

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functionality of the file src/tools/rangeConfig.ts of the component...

CVE-2026-19367

A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functional

历史摘要 · 未重新核验 · NVD

安全公告2026-08-09 发布INFO

A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some...

CVE-2026-19352

A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality o

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-09 发布INFO

A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-...

CVE-2026-19352

A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality o

历史摘要 · 未重新核验 · NVD

安全公告2026-08-09 发布INFO

A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown...

CVE-2026-19340

A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown function of the file bac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-09 发布INFO

A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The...

CVE-2026-19339

A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is th

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-09 发布INFO

A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown function of the file backend-fix/complete_backend.js of the component Webhooks AP...

CVE-2026-19340

A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown function of the file bac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is the function ReadResourceRequestSchema of the file src/reso...

CVE-2026-19339

A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is th

历史摘要 · 未重新核验 · NVD

安全公告2026-08-09 发布INFO

A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown...

CVE-2026-19337

A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-09 发布INFO

A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/index.ts of the component read_webpage. Executing a manip...

CVE-2026-19337

A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/

历史摘要 · 未重新核验 · NVD

安全公告2026-08-08 发布INFO

Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard...

CVE-2026-67620

Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-08 发布INFO

Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULT_DENY_LIST omits the Oracle Cloud I...

CVE-2026-67620

Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function...

CVE-2026-19246

A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function _download_image_data_url of the f

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, the `$import-pnp` op...

CVE-2026-47664

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRU...

CVE-2026-47662

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function _download_image_data_url of the file nanobot/providers/image_generation.py of the componen...

CVE-2026-19246

A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function _download_image_data_url of the f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's bulk-subm...

CVE-2026-47660

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior

历史摘要 · 未重新核验 · NVD