MINI-63MR-9467-X6VW

Bulletin has no description...

MINI-HRXR-9467-JFMV

Bulletin has no description...

CVE-2026-9467 debugmcp mcp-debugger server.ts handleGetSourceContext path traversal

A vulnerability was identified in debugmcp mcp-debugger up to 0.20.0. Impacted is the function handleGetSourceContext of the file src/server.ts. The manipulation leads to path traversal. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The...

CVE-2026-9467

A vulnerability was identified in debugmcp mcp-debugger up to 0.20.0. Impacted is the function handleGetSourceContext of the file src/server.ts. The manipulation leads to path traversal. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The...

MINI-V745-9467-Q35H

Bulletin has no description...

CVE-2018-9467

In the getHost function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation...

com.github.mcollovati:hilla-shaded-deps (>=24.4.0-beta1, <=24.4.2), com.github.mcollovati:quarkus-hilla (>=24.4.0-beta1, <=24.4.2) +10 more potentially affected by CVE-2025-9467 via com.vaadin:vaadin (>=24.0.0, <=24.7.6)

com.vaadin:vaadin MAVEN version =24.0.0, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.0.0, =24.0.0, =24.7.6 - io.sunshower.aire-test:aire-test-spring 1.0.11.final - io.sunshower.aire-test:aire-test-vaadin 1.0.11.final -...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.0.m1, <=1.0.0), com.beirtipol:jfixtools-reporting (1.0-beta) +158 more potentially affected by CVE-2025-9467 via com.vaadin:vaadin-upload-flow (>=2.0.0, <=14.13.0)

com.vaadin:vaadin-upload-flow MAVEN version =2.0.0, =1.0.0.m1, =3.7.0, =2.9.3, =1.3.0, =1.0, =0.0.1, =14.0.0, =1.0.0, =0.3.1, =1.0.0, =1.0.0, =1.0.5.4 and more Source cves: CVE-2025-9467 Source advisory: GHSA-94G8-XV23-7656...

ca.qc.ircm:plate-layout (>=0.8, <=0.9), com.github.elhoce:vaadin-signaturefield-v8 (2.0.9) +142 more potentially affected by CVE-2025-9467 via com.vaadin:vaadin-server (>=8.0.0, <=8.28.1)

com.vaadin:vaadin-server MAVEN version =8.0.0, =0.8, =0.3.1, =1.0.0, =0.3.0, =0.5.1, =0.5.1, =1.0.0, =1.0.9, =1.0.9, =1.7-1, =1.8 and more Source cves: CVE-2025-9467 Source advisory: SNYK:JAVA-COMVAADIN-12496925...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.0.m1, <=1.0.0), com.beirtipol:jfixtools-reporting (1.0-beta) +158 more potentially affected by CVE-2025-9467 via com.vaadin:vaadin-upload-flow (>=2.0.0, <=14.13.0)

com.vaadin:vaadin-upload-flow MAVEN version =2.0.0, =1.0.0.m1, =3.7.0, =2.9.3, =1.3.0, =1.0, =0.0.1, =14.0.0, =1.0.0, =0.3.1, =1.0.0, =1.0.0, =1.0.5.4 and more Source cves: CVE-2025-9467 Source advisory: SNYK:JAVA-COMVAADIN-12496926...

CVE-2025-9467

creationtimestamp| type| source ---|---|--- 2025-09-04 07:28:14+00:00| seen| Telegram/AbxEel7Kd4BeOsrZC1V8cphwUvIGXhK4rZsAcTyTZE0f2Gc...

com.alibaba.rsocket:alibaba-broker-server (>=1.1.3, <=1.1.4), com.github.mcollovati.vertx:vertx-vaadin-flow (>=23.1.0, <=23.4.1) +130 more potentially affected by CVE-2025-9467 via com.vaadin:vaadin-upload-flow (>=23.0.0, <=23.6.1)

com.vaadin:vaadin-upload-flow MAVEN version =23.0.0, =1.1.3, =23.1.0, =1.0.0-alpha1, =1.0.0-alpha1, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =5.7.0, =5.7.1 and more Source cves: CVE-2025-9467 Source advisory:...

MAL-2025-9467 Malicious code in @taktikangea/quisquam-repudiandae-eligendi (npm)

The package @taktikangea/quisquam-repudiandae-eligendi was found to contain malicious code...

CVE-2020-9467

Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...

CVE-2015-9467

The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter...

CVE-2018-9467

creationtimestamp| type| source ---|---|--- 2024-11-20 02:02:33+00:00| seen| https://t.me/cvedetector/11555 2026-06-21 12:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mosdipjdv22m...

CVE-2018-9467

In the getHost function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9467

In the getHost function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9467

In the getHost function of UriTest.java, there is the possibility of incorrect web origin determination. This could lead to incorrect security decisions with no additional execution privileges needed. User interaction is not needed for exploitation...

Palo Alto Expedition < 1.2.96 Multiple Vulnerabilties

Palo Alto Expedition versions before 1.2.96 suffer from multiple vulnerabilities: - An unauthenticated OS command Injection vulnerability through the /API/convertCSVtoParquet.php endpoint CVE-2024-9264 - An authenticated OS command injection vulnerability CVE-2024-9464 - An unauthenticated SQL...