共收录 2042 条相关情报。
← 返回所有主题CVE-2026-10276
A vulnerability has been found in hekmon8 Jenkins-server-mcp 0.1.0. This vulnerability affects the function jobPath of t
CVE-2026-10274
A vulnerability was determined in indrasishbanerjee aem-mcp-server up to b5f833aef9b5dfd17a5991b3b18a8a11edbdc583. This
CVE-2026-49328
Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.
CVE-2026-10517
A flaw was found in Clair. The fetcher component makes outbound HTTP requests to attacker-supplied URIs from manifest la
CVE-2026-10241
A security flaw has been discovered in jeecgboot The server processes these URLs up to 3.9.1. This affects the function
CVE-2026-10240
A vulnerability was identified in JeecgBoot up to 3.9.2. The impacted element is an unknown function of the file /airag/
CVE-2026-10239
A vulnerability was determined in JeecgBoot up to 3.9.2. The affected element is the function WordUtil.addImage of the f
CVE-2026-10177
A security vulnerability has been detected in Aider-AI Aider 0.86.3. This affects the function requests.get of the file
CVE-2026-10177
A security vulnerability has been detected in Aider-AI Aider 0.86.3. This affects the function requests.get of the file
CVE-2026-47390
### Summary PraisonAI's `spider_tools` URL validation can be bypassed using alternate loopback host encodings. The aff
CVE-2026-47268
#### Summary An authenticated Nezha dashboard user can create or update a DDNS profile with provider `webhook` and conf
CVE-2026-48555
Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows rem
CVE-2026-49372
In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible
CVE-2026-47695
### Summary CC-Tweaked's HTTP API (`http.request`, `http.websocket`) blocks requests to private network ranges to preve
CVE-2026-48555
CVE-2026-48555 是一个存在于 Spatie Laravel Media Library 组件（版本低于 11.23.0）中的服务器端请求伪造（SSRF）漏洞。该漏洞源于 InteractsWithMedia.php 文件中的
CVE-2026-44285
FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, a Server-Side Request Forgery (SSRF) vulnerability allo
CVE-2026-47260
## Summary Koel validates the podcast feed URL via the `SafeUrl` rule (DNS resolution + public IP check), but the indiv
CVE-2026-49372
In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible
CVE-2026-46372
SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode
CVE-2026-44652
SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode