344750 matches found
Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints
Unauthenticated Path Traversal in Dashboard Session Log API Endpoints | Field | Value | | ---------------- | ----- | | Repository | ooples/token-optimizer-mcp | | Affected version | 5.0.1 commit 8137147 | | Vulnerability | CWE-22 — Improper Limitation of a Pathname to a Restricted Directory | |...
GHSA-76PC-MQXP-3RQ5 Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints
Unauthenticated Path Traversal in Dashboard Session Log API Endpoints | Field | Value | | ---------------- | ----- | | Repository | ooples/token-optimizer-mcp | | Affected version | 5.0.1 commit 8137147 | | Vulnerability | CWE-22 — Improper Limitation of a Pathname to a Restricted Directory | |...
GHSA-49MQ-FC6Q-3H46 Token Optimizer MCP: OS command injection in smart_user via username in get-user-info
Summary token-optimizer-mcp is vulnerable to OS command injection in the smartuser tool. The get-user-info operation accepts a user-controlled username argument and later interpolates it into a shell command executed through execAsync: ts getent passwd "$username" || grep "^$username:" /etc/passw...
Token Optimizer MCP: OS command injection in smart_user via username in get-user-info
Summary token-optimizer-mcp is vulnerable to OS command injection in the smartuser tool. The get-user-info operation accepts a user-controlled username argument and later interpolates it into a shell command executed through execAsync: ts getent passwd "$username" || grep "^$username:" /etc/passw...
MINI-76XM-3WQ4-FPXR
Bulletin has no description...
MINI-HPH2-3XJW-5WVW
Bulletin has no description...
GHSA-H4MF-4V27-HGGJ vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-XHF4-832V-7XCR vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-27871
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...
MINI-X3VP-C4WR-P4XJ
Bulletin has no description...
MINI-PW8C-GH6F-MX2Q
Bulletin has no description...
MINI-JHGJ-GH9G-J7QX
Bulletin has no description...
MINI-5XVR-GFFP-P369
Bulletin has no description...
MINI-57X6-W398-5QHP
Bulletin has no description...
MINI-5WVV-X3C5-VM7J
Bulletin has no description...
MINI-VGFW-G2FW-4C2X
Bulletin has no description...
OpenAM Insecure SSO Cookie Initialization
Summary Description An Insecure Default Initialization of Resource CWE-1188 issue in the OpenAM default configuration ships the iPlanetDirectoryPro SSO cookie with HttpOnly=false. Also, the iPlanetDirectoryPro SSO cookie is used as a CSRF token in OAuth/OIDC flows. This affects OpenAM Community...
GHSA-FPMH-VX4H-XC33 OpenAM Insecure SSO Cookie Initialization
Summary Description An Insecure Default Initialization of Resource CWE-1188 issue in the OpenAM default configuration ships the iPlanetDirectoryPro SSO cookie with HttpOnly=false. Also, the iPlanetDirectoryPro SSO cookie is used as a CSRF token in OAuth/OIDC flows. This affects OpenAM Community...
