A security flaw has been discovered in geldata gel-mcp 0.1.0. This impacts the function...
CVE-2026-7403
A security flaw has been discovered in geldata gel-mcp 0.1.0. This impacts the function list_rules/fetch_rule of the fil
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected is the...
CVE-2026-7404
A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected is the function delete_shared_p
AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs...
CVE-2026-7439
AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without
PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the...
CVE-2018-25306
PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by process
OpenClaw: Owner-enforced commands could accept wildcard channel senders as command owners
## Impact OpenClaw deployments before `2026.4.21` could treat a non-owner sender as authorized for owner-enforced slash
n8n has Public API Variables IDOR that Allows Cross-Project Secret Disclosure
CVE-2026-42227
## Impact An authenticated user with a valid API key scoped to `variable:list` could read variables from projects they a
n8n Vulnerable to Hijacking of Unauthenticated Chat Execution
CVE-2026-42228
## Impact The `/chat` WebSocket endpoint used by the Chat Trigger node's Hosted Chat feature did not verify that an inco
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in...
CVE-2026-42644
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs bette
Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode...
CVE-2026-42645
Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Or
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-42643
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image Wi
Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg...
CVE-2026-42648
Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrec
Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly...
CVE-2026-42642
Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Sec
Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-image...
CVE-2026-42641
Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-image allows Server Side Request F
The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-2902
The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving...
CVE-2026-22745
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More
The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to unauthorized data...
CVE-2026-4019
The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to unauthorized data access in all versions
Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly...
CVE-2026-42412
Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control S
The authentication endpoint accepts user-supplied input without enforcing expected validation...
CVE-2025-10503
The authentication endpoint accepts user-supplied input without enforcing expected validation constraints, leading to a
Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026...
CVE-2026-21023
Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local att
Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request...
CVE-2026-23773
Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability.