Next.js has information disclosure in development server's Model Context Protocol endpoint
CVE-2026-94486
The Next.js development server (`next dev`) exposes a Model Context Protocol endpoint that does not verify which website
#severity:low
共收录 1562 条相关情报。
← 返回所有主题In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd...
CVE-2026-106589
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpected
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading...
CVE-2026-106583
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes...
CVE-2026-106587
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but w
In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss...
CVE-2026-106588
In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is
In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be...
CVE-2026-106555
In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentica
In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be...
CVE-2026-106586
In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwar
In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is...
CVE-2026-106582
In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because...
CVE-2026-106584
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mish
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a...
CVE-2026-106553
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authenticati
Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
CVE-2026-105795
### Impact When generating an API plugin manifest from an attacker-controlled or compromised OpenAPI description, Kiota
i18next-http-backend incomplete URL validation permits SSRF
CVE-2026-105800
There is an SSRF vulnerability when using `i18next-http-backend`. A colon in an attacker-controlled language value can m
LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values
CVE-2026-105799
## Summary `@langchain/redis` did not properly escape values used to construct structured RediSearch TAG and TEXT filte
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the...
CVE-2026-105775
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This...
CVE-2026-105705
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function o
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an...
CVE-2026-105706
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Execut
A vulnerability was determined in PHPGurukul User Registration & Login and User Management System...
CVE-2026-105703
A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted elem
A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function...
CVE-2026-105708
A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the fi
A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function...
CVE-2026-105621
A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail
A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown...
CVE-2026-105611
A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blad