CVE-2026-33252

A flaw was found in the Go MCP SDK's Streamable HTTP transport, which uses Go's standard encoding/json package. In deployments without authorization, a remote attacker can exploit this Cross-Site Request Forgery CSRF vulnerability. By sending browser-generated cross-site POST requests to a local...

CVE-2019-18386

Systems management on Unisys ClearPath Forward Libra and ClearPath MCP Software Series can fault and have other unspecified impact when receiving specifically crafted message payloads over a systems management communication channel...

CVE-2019-18386

The CVE-2019-18386 entry affects Unisys ClearPath Forward Libra and ClearPath MCP Software Series. The issue is triggered by receiving specifically crafted message payloads over a systems management communication channel, causing faults and other unspecified impact. The connected sources do not p...