共收录 1460 条相关情报。
← 返回所有主题CVE-2026-106764
An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch func
CVE-2026-57142
PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.61, PraisonAI recipe execution has a
CVE-2025-30050
CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified
CVE-2025-30045
CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF documen
CVE-2026-115536
A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Th
CVE-2026-115535
A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The aff
CVE-2026-79877
A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjace
CVE-2026-115351
Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attackers controlling markdown input
CVE-2026-114126
**Summary:** The Storybook dev server exposes its WebSocket authentication token to any client that can load its HTML pa
CVE-2026-115246
A weakness has been identified in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a2
CVE-2021-48016
DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is wri
CVE-2026-76293
In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_
CVE-2026-112949
### Summary `@vitest/mocker`'s `interceptorPlugin` accepts mock registrations on Vite's dev-server WebSocket with no au
CVE-2026-92207
MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ex
CVE-2026-114126
Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19,
CVE-2026-114125
Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19,
CVE-2026-114125
**Summary:** A malicious website may be able to cause unauthorized file changes in a developer’s project while an affect
CVE-2026-114053
vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProces
CVE-2026-114053
vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProces
CVE-2026-113741
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown f