#severity:medium

共收录 5624 条相关情报。

← 返回所有主题
安全公告2026-04-28 发布INFO

A vulnerability was identified in eghuzefa engineer-your-data up to 0.1.3. This vulnerability...

CVE-2026-7214

A vulnerability was identified in eghuzefa engineer-your-data up to 0.1.3. This vulnerability affects the function read_

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A weakness has been identified in donchelo processing-claude-mcp-bridge up to...

CVE-2026-7216

A weakness has been identified in donchelo processing-claude-mcp-bridge up to e017b20a4b592a45531a6392f494007f04e661bd.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel...

CVE-2026-0711

A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A security flaw has been discovered in egtai gmx-vmd-mcp up to 0.1.0. This issue affects the...

CVE-2026-7215

A security flaw has been discovered in egtai gmx-vmd-mcp up to 0.1.0. This issue affects the function launch_vmd_gui_too

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A security vulnerability has been detected in Deepractice PromptX up to 2.4.0. The affected...

CVE-2026-7217

A security vulnerability has been detected in Deepractice PromptX up to 2.4.0. The affected element is the function read

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A vulnerability was detected in ef10007 MLOps_MCP 1.0.0. This impacts an unknown function of the...

CVE-2026-7213

A vulnerability was detected in ef10007 MLOps_MCP 1.0.0. This impacts an unknown function of the file fastmcp_server.py

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4. This affects...

CVE-2026-7212

A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4. This affects an unknown function of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the...

CVE-2026-7211

A weakness has been identified in dvladimirov MCP up to 0.1.0. The impacted element is the function GitSearchRequest of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A vulnerability was identified in duartium papers-mcp-server...

CVE-2026-7205

A vulnerability was identified in duartium papers-mcp-server 9ceb3812a6458ba7922ca24a7406f8807bc55598. Impacted is the f

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the...

CVE-2026-7206

A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0. The affected element is the function extract_to_js

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenClaw before 2026.4.2 fails to normalize trailing-dot localhost hosts in remote CDP discovery...

CVE-2026-41372

OpenClaw before 2026.4.2 fails to normalize trailing-dot localhost hosts in remote CDP discovery responses, allowing byp

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this...

CVE-2026-7200

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is some unknown

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenClaw versions 2026.2.6 through 2026.3.24 contain a path traversal vulnerability in the Feishu...

CVE-2026-41363

OpenClaw versions 2026.2.6 through 2026.3.24 contain a path traversal vulnerability in the Feishu extension resolveUploa

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in...

CVE-2026-41366

OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in appendLocalMediaParentRoots that all

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

Spring Boot's Cassandra auto-configuration does not perform hostname verification when...

CVE-2026-40974

Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not...

CVE-2026-40975

Values produced by ${random.value} are not suitable for use as secrets. ${random.uuid} is not affected. ${random.int} an

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an...

CVE-2026-7196

A security vulnerability has been detected in CodeAstro Online Classroom 1.0. Affected is an unknown function of the fil

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy...

CVE-2026-41367

OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord butto

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability in MS Teams thread...

CVE-2026-41365

OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability in MS Teams thread history fetched via Graph

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-04-28 发布INFO

When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write...

CVE-2026-40977

When an application is configured to use `ApplicationPidFileWriter`, a local attacker with write access to the PID file'

历史摘要 · 未重新核验 · GitHub Advisory