Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970,...
CVE-2026-101065
Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart
#severity:critical
共收录 1449 条相关情报。
← 返回所有主题Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. ...
CVE-2026-88771
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: b
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC:...
CVE-2026-88772
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 1
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in...
CVE-2026-88773
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC a
Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer,...
CVE-2026-100741
Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3
Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any...
CVE-2026-100835
Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestation report
vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When...
CVE-2026-100721
vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures `
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload...
CVE-2026-82901
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable...
CVE-2026-85984
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass
Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature...
CVE-2026-94132
Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterpri
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5...
CVE-2026-97163
Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin...
CVE-2026-97161
Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin...
CVE-2026-97160
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0
Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the...
CVE-2026-100720
Froxlor 2.0.0 through 2.3.10 is vulnerable to stored cross-site scripting. When a customer (the lowest-privileged authen
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension <...
CVE-2026-94130
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injectio
Froxlor is a server administration panel. In versions 2.3.10 and earlier, the customer data...
CVE-2026-100716
Froxlor is a server administration panel. In versions 2.3.10 and earlier, the customer data-export (DataDump) cron fails
kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall...
CVE-2026-100706
kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlPath, allowing namespace
Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting:...
CVE-2026-100714
Froxlor before 2.3.12 does not restrict or escape the system.letsencryptchallengepath setting: unlike sibling settings h
The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware...
CVE-2026-81630
The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update proce
Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in...
CVE-2026-93291
Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which c