107080 matches found
CVE-2026-74858: Server-Side Request Forgery (SSRF)
A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetchurl/fetchurls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack...
CVE-2026-19984: Server-Side Request Forgery (SSRF)
A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function getimages of the file src/mcpflorence2/init.py. This manipulation of the argument src causes server-side request forgery. The attack may be initiated remotely. The exploit has been published and...
CVE-2026-75110: Incorrect Comparison
MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTHENABLED=true but the undocumented, defaultless INTERNALSERVICESECRET environment variable is unset, the isinternalrequest check in src/memos/api/middleware/auth.py fails open:...
CVE-2026-67966: Missing Authentication for Critical Function
Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...
CVE-2026-19962: Improper Neutralization of Special Elements used in a Command
A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be performed from remote. The exploit has...
Unity Linux 20.1070e Security Update: elfutils (UTSA-2026-099521)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099521 advisory. A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function libdwthreadtail in the library libdwalloc.c ...
The vulnerability of the Python library for interacting with git repositories, GitPython, arises from the lack of measures to neutralize special elements, allowing attackers to execute arbitrary code.
The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the lack of measures taken to neutralize special elements during the processing of the unsafegitcloneoptions parameter. Exploiting this vulnerability could allow a remote attacker to execute...
Vulnerability of components of Linux operating system’s kernel’s RDS, allowing a hacker to cause a service failure
The vulnerability of Linux operating system kernel’s rds components is related to incomplete recognition of internal states. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Apache Tomcat application server, related to the use of cryptographic algorithms containing vulnerabilities, allows attackers to alter the order of preference for encryption.
The vulnerability of the Apache Tomcat application server is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability allows a remote attacker to alter the encryption preferences...
CVE-2026-50774
An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role...
CVE-2026-50770
An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request...
CVE-2026-67918
Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint...
CVE-2026-50768
File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function...
CVE-2026-50771
Cross Site Scripting vulnerability in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions...
CVE-2026-19970: Heap-based Buffer Overflow
A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bonesnum results in heap-based buffer...
CVE-2026-19998: Improper Neutralization of Input During Web Page Generation
A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to...
CVE-2026-19997: Authorization Bypass Through User-Controlled Key
A security flaw has been discovered in Webkul Bagisto up to 2.4.4. This issue affects some unknown processing of the file /admin/sales/rma/requests of the component Backend Sales RMA Endpoint. Performing a manipulation results in authorization bypass. The attack is possible to be carried out...
CVE-2026-19994: Authorization Bypass Through User-Controlled Key
A vulnerability was found in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/configuration/cache-management/execute of the component Configuration Management. The manipulation of the argument action results in authorization bypass. The attack ma...
Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099492)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099492 advisory. An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. django.http.HttpRequest.getsignedcookie in Django uses a non-injective salt derivation...