Lucene search
+L

581 matches found

Cvelist
Cvelist
•added 2026/07/21 12:00 a.m.•34 views

CVE-2026-50757

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...

0.00625EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/21 12:00 a.m.•36 views

CVE-2026-50756

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...

0.00507EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/21 12:00 a.m.•37 views

CVE-2026-50755

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value...

0.00621EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•1 views

CVE-2026-50758: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter...

8.1CVSS6.6AI score0.00721EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•1 views

CVE-2026-50757: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...

7.8CVSS6.6AI score0.00625EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/21 12:00 a.m.•31 views

CVE-2026-50756

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...

7.5CVSS5.4AI score0.00507EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/21 12:00 a.m.•10 views

CVE-2026-50755

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value...

5.3AI score0.00621EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/21 12:00 a.m.•10 views

CVE-2026-50758

Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter...

5.9AI score0.00721EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/21 12:00 a.m.•6 views

CVE-2026-50757

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...

6.1AI score0.00625EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/21 12:00 a.m.•36 views

CVE-2026-50755

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value...

9.8CVSS5.4AI score0.00621EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•24 views

PT-2026-62081

Name of the Vulnerable Software and Affected Versions DayuanJiang next-ai-draw-io version 0.4.13 Description A remote attacker can obtain sensitive information by manipulating the X-Forwarded-For header value. Recommendations At the moment, there is no information about a newer version that...

9.8CVSS5.9AI score0.00621EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/21 12:00 a.m.•8 views

CVE-2026-50758

Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter...

5.9AI score0.00721EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•1 views

CVE-2026-50756: Weak Authentication

An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the x-ai-provider component...

7.5CVSS5.8AI score0.00507EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/21 12:00 a.m.•32 views

CVE-2026-50758

Cross Site Scripting vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to execute arbitrary code via the mcp parameter...

0.00721EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/21 12:00 a.m.•31 views

CVE-2026-50757

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...

7.8CVSS6.2AI score0.00625EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/21 12:00 a.m.•12 views

CVE-2026-50757

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...

6.1AI score0.00625EPSS
SaveExploits0References3
Fedora
Fedora
•added 2026/07/16 1:20 a.m.•24 views

[SECURITY] Fedora 44 Update: perl-Imager-1.033-1.fc44

Imager is a module for creating and altering images. It can read and write various image formats, draw primitive shapes like lines,and polygons, blend multiple images together in various ways, scale, crop, render text and more...

9.8CVSS6.1AI score0.00657EPSS
SaveExploits0
PyPA
PyPA
•added 2026/07/13 2:19 p.m.•19 views

TensorFlow vulnerable to `CHECK` fail in `DrawBoundingBoxes`

ImpactWhen DrawBoundingBoxes receives an input boxes that is not of dtype float, it gives a CHECK fail that can trigger a denial of service attack.pythonimport tensorflow as tfimport numpy as nparg0=tf.constantvalue=np.random.randomsize=1, 3, 2, 3, shape=1, 3, 2, 3,...

7.5CVSS6.9AI score0.00478EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•18 views

PT-2026-59826

Impact When DrawBoundingBoxes receives an input boxes that is not of dtype float, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg 0=tf.constantvalue=np.random.randomsize=1, 3, 2, 3, shape=1, 3, 2, 3, dtype=tf.half arg...

7.5CVSS6.9AI score0.00478EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•10 views

PT-2026-59960

Impact When DrawBoundingBoxes receives an input boxes that is not of dtype float, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg 0=tf.constantvalue=np.random.randomsize=1, 3, 2, 3, shape=1, 3, 2, 3, dtype=tf.half arg...

7.5CVSS6.9AI score0.00478EPSS
SaveExploits0References8
Rows per page
Query Builder