OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A...
CVE-2026-62216
OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust caller or c
#severity:low
共收录 1585 条相关情报。
← 返回所有主题Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM...
CVE-2026-15997
Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffer
Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042...
CVE-2024-32389
Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a remote attack
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. GENURLAUTH-issued tokens can...
CVE-2026-47086
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. GENURLAUTH-issued tokens can bypass ACLs. Any authe
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in...
CVE-2026-47088
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsi
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH does not honor...
CVE-2026-47087
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. URLAUTH does not honor revoked authorizer access. A
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an...
CVE-2026-47081
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is an XAPPLEPUSHSERVICE folder existence orac
nimiq-primitives: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof
CVE-2026-54542
### Impact A malicious peer acting as a state-sync source can crash a syncing node with a crafted `TrieChunk` whose pro
nimiq-primitives: Panic in TrieProof::verify via child_index unwrap on equal-length keys
CVE-2026-54541
### Impact A malicious peer acting as a state-sync source can crash a syncing node by sending a crafted `TrieChunk` who
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)
CVE-2026-58196
# Security Advisory: SSRF in remote MCP server authentication discovery **Severity:** High. **CWE:** CWE-918. **Affecte
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway
CVE-2026-54450
## Summary ToolHive's hand-rolled private/reserved-IP SSRF guard (`networking.IsPrivateIP` in `pkg/networking/utilities
CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers...
CVE-2026-40958
CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of
CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14...
CVE-2026-40956
CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with inti
CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure...
CVE-2026-40954
CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 1
CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure...
CVE-2026-40955
CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 1
A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this...
CVE-2026-15753
A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this vulnerability is an unknown
A security vulnerability has been detected in mastergo-design mastergo-magic-mcp up to 0.2.0. The...
CVE-2026-15751
A security vulnerability has been detected in mastergo-design mastergo-magic-mcp up to 0.2.0. The affected element is th
HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker...
CVE-2026-21840
HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker, through careful syste
A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the...
CVE-2026-15750
A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of t
ColdFusion is affected by an Insufficient Session Expiration vulnerability that could result in a...
CVE-2026-48329
ColdFusion is affected by an Insufficient Session Expiration vulnerability that could result in a Security feature bypas