CVE-2026-41302

OpenClaw (npm) before 2026.3.31 is vulnerable to a server-side request forgery (SSRF) in the marketplace plugin download. The issue arises from unguarded fetch() calls, enabling an attacker to make arbitrary network requests from the affected system, potentially reaching internal resources or ext...

PT-2020-13861 · Codiad · Codiad

Name of the Vulnerable Software and Affected Versions: Codiad versions 1.7.8 and later Description: A Cross Side Request Forgery CSRF vulnerability was found in the request to download a plugin from the marketplace, which is only available to admin users. The issue lies in the...

Security Bulletin: Multiple vulnerabilities in the IBM SDK, Java Technology Edition affects IBM Performance Management products

Summary CVE-2019-2949 deferred from Oracle Oct 2019 CPU Vulnerability Details CVEID: CVE-2019-2949 DESCRIPTION: An unspecified vulnerability in Java SE related to the Kerberos component could allow an unauthenticated attacker to obtain sensitive information resulting in a high confidentiality...