CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

11 matches found

EUVD•added 2026/08/28 11:00 a.m.•18 views

EUVD-2026-67588

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component uploadimage. Performing a manipulation of the argument imagepath results in path traversal. The attack can be initiated remotely. The...

5.3CVSS5.6AI score0.00546EPSS

SaveExploits0References9

NVD•added 2026/08/27 2:16 a.m.•13 views

CVE-2026-81485

A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The...

6.9CVSS0.0069EPSS

SaveExploits0References6

BDU FSTEC•added 2026/01/30 12:00 a.m.•14 views

The vulnerability of the `fs.statSync()` and `fs.readFileSync()` functions in the pnpm package manager’s script `store/cafs/src/addFilesFromDir.ts` allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the fs.statSync and fs.readFileSync functions in the pnpm package manager’s script store/cafs/src/addFilesFromDir.ts is related to an incorrect definition of references before accessing files. Exploiting this vulnerability could allow an attacker to gain unauthorized access t...

5.5CVSS5.8AI score0.00535EPSS

SaveExploits1References4Affected Software1

Positive Technologies•added 2024/09/30 12:00 a.m.•18 views

PT-2024-32016 · Unknown · Simple-Spellchecker

Name of the Vulnerable Software and Affected Versions: Simple-Spellchecker version 1.0.2 Description: An issue in the readFileSync function allows attackers to read arbitrary files via a directory traversal. This issue affects the readFileSync function, enabling attackers to read any file...

6.9AI score

SaveExploits0References7