Lucene search
+L

2 matches found

CNNVD
CNNVD
added 2026/05/04 12:00 a.m.28 views

MCP Server for ArangoDB 路径遍历漏洞

MCP Server for ArangoDB is a database interaction tool based on ArangoDB, developed by Alp Sarıyer. Versions of MCP Server for ArangoDB 0.4.7 and earlier had a path traversal vulnerability. This vulnerability stemmed from the function arangobackup in the MCP Interface component, which allowed for...

6.5CVSS6.6AI score0.00288EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/15 12:00 a.m.17 views

PT-2026-8239

ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface index.html through search, user management, and API parameters. Attackers can inject scripts via parameters in / db/ system/ admin/aardvark/index.html to execute JavaScrip...

5.4CVSS5.2AI score0.00165EPSS
SaveExploits0References4
Rows per page
Query Builder