39696 matches found
CVE-2026-28433 Misskey lacks resource ownership validation
Misskey is an open source, federated social media platform. All Misskey servers running versions 10.93.0 and later, but prior to 2026.3.1, contain a vulnerability that allows importing other users' data due to lack of ownership validation. The impact of this vulnerability is estimated to be...
OpenClaw: system.run allow-always persistence included shell-commented payload tails
OpenClaw's system.run allowlist analysis did not honor POSIX shell comment semantics when deriving allow-always persistence entries. A caller in security=allowlist mode who received an allow-always decision could submit a shell command whose tail was commented out at runtime, for example by using...
Insufficiently Protected Credentials
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the fetchWithSsrFGuard process. An attacker can obtain sensitive authorization credentials by triggering a cross-origin redirect that causes custo...
OpenClaw's system.run allowlist approval parsing missed PowerShell encoded-command wrappers
OpenClaw's system.run shell-wrapper detection did not recognize PowerShell -EncodedCommand forms as inline-command wrappers. In allowlist mode, a caller with access to system.run could invoke pwsh or powershell using -EncodedCommand, -enc, or -e, and the request would fall back to plain argv...
Use of GET Request Method With Sensitive Query Strings
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Use of GET Request Method With Sensitive Query Strings via the process that appends authentication material to the browser URL query string and persists it in browser localStorage. An...
EUVD-2025-208441
An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223...
EUVD-2025-208427
An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in Nexusoft NexusInterface v3.2.0-beta.2...
CVE-2025-11839 affecting package binutils for versions less than 2.37-20
CVE-2025-11839 affecting package binutils for versions less than 2.37-20. A patched version of the package is available...
CVE-2025-39795 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39795 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-47911 affecting package cf-cli for versions less than 8.4.0-27
CVE-2025-47911 affecting package cf-cli for versions less than 8.4.0-27. A patched version of the package is available...
CVE-2025-39812 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39812 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-71154 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-71154 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-30204 affecting package cf-cli for versions less than 8.4.0-27
CVE-2025-30204 affecting package cf-cli for versions less than 8.4.0-27. A patched version of the package is available...
CVE-2025-58190 affecting package cert-manager for versions less than 1.11.2-27
CVE-2025-58190 affecting package cert-manager for versions less than 1.11.2-27. A patched version of the package is available...
CVE-2026-25068 affecting package alsa-lib for versions less than 1.2.6.1-3
CVE-2026-25068 affecting package alsa-lib for versions less than 1.2.6.1-3. A patched version of the package is available...
CVE-2025-38683 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-38683 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-47911 affecting package cni for versions less than 1.0.1-21
CVE-2025-47911 affecting package cni for versions less than 1.0.1-21. A patched version of the package is available...
CVE-2025-11065 affecting package kubevirt for versions less than 0.59.0-38
CVE-2025-11065 affecting package kubevirt for versions less than 0.59.0-38. A patched version of the package is available...
CVE-2025-39772 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39772 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...