37286 matches found
CVE-2026-65695
Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute...
EUVD-2026-42365
pypdf: Possible infinite loop for not terminated inline images ASCII85 and ASCIIHex filter...
EUVD-2026-48308
Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute...
CVE-2026-65695 Office-Word-MCP-Server 1.1.11 Path Traversal via document tools
Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attackers who can influence the filename argument to read arbitrary .docx files or create and overwrite .docx files outside the intended working directory. Attackers can supply absolute...
ECHO-D974-573E-7A5B
Bulletin has no description...
MINI-Q7XX-F2JR-4RJW
Bulletin has no description...
MINI-V3F4-W963-4M23
Bulletin has no description...
MINI-8V43-QF33-72GX
Bulletin has no description...
MINI-6F5Q-HWRR-C994
Bulletin has no description...
MINI-69PQ-CPWM-XMH5
Bulletin has no description...
MINI-F782-39Q2-JCPX
Bulletin has no description...
MINI-6G2R-9CMP-2J9F
Bulletin has no description...
MINI-RJXF-M767-P3XW
Bulletin has no description...
EUVD-2026-48254
Improper output neutralization XML injection in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under th...
PYSEC-2026-3495 Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
Summary PdfParser.PdfStream.decode in Pillow's PdfParser.py calls zlib.decompress with the bufsize parameter set to the value of the PDF stream's Length field, without any upper bound on the actual decompressed output size. Python's zlib.decompress bufsize argument is an initial output buffer hin...
ECHO-60A1-36C5-6226
Bulletin has no description...
ECHO-6F24-CDD7-9E3E
Bulletin has no description...
ECHO-BE32-8712-2A19
Bulletin has no description...