Lucene search
K

6 matches found

CNNVD
CNNVD
added 2026/04/20 12:0 a.m.8 views

Pagekit 安全漏洞

Pagekit is a modular and lightweight CMS Content Management System developed by Pagekit. Versions of Pagekit 1.0.18 and earlier contained security vulnerabilities. These vulnerabilities were caused by an improper handling of directives in the dynamically evaluated code within the function evaluat...

5.8CVSS5.9AI score0.00244EPSS
Exploits0References1
CVE
CVE
added 2026/04/09 6:0 p.m.13 views

CVE-2026-5971

FoundationAgents MetaGPT up to 0.8.1 is affected. The vulnerability lies in ActionNode.xml_fill within metagpt/actions/action_node.py (XML Handler). It enables remote exploitation through manipulation of dynamically evaluated code, with reports that an exploit has been published. Multiple sources...

9.8CVSS6.7AI score0.00387EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2026/04/09 6:0 p.m.20 views

CVE-2026-5971 FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection

A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the function ActionNode.xmlfill of the file metagpt/actions/actionnode.py of the component XML Handler. Executing a manipulation can lead to improper neutralization of directives in dynamically evaluated cod...

7.5CVSS0.00387EPSS
Exploits1References6
OSV
OSV
added 2026/03/02 1:19 p.m.2 views

SUSE-SU-2026:20528-1 Security update for cups

This update for cups fixes the following issues: Update to version 2.4.16. Security issues fixed: - CVE-2025-58436: single client sending slow messages to cupsd can delay the application and make it unusable for other clients bsc1244057. - CVE-2025-58060: authentication bypass with AuthType...

8CVSS6AI score0.01063EPSS
Exploits4References10
Vulnrichment
Vulnrichment
added 2025/11/06 8:42 p.m.4 views

CVE-2025-64173 Apollo Router Core: Access Control Bypass on Polymorphic Types

Apollo Router Core is a configurable graph router written in Rust to run a federated supergraph using Apollo Federation 2. In versions 1.61.11 below, as well as 2.0.0-alpha.0 through 2.8.1-rc.0, a vulnerability allowed for unauthenticated queries to access data that required additional access...

7.5CVSS6.5AI score0.00278EPSS
Exploits0References3
OSV
OSV
added 2020/12/14 8:15 p.m.3 views

DEBIAN-CVE-2020-29510

The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications...

5.6CVSS7.3AI score0.02047EPSS
Exploits0References1
Rows per page
Query Builder