Lucene search
+L

845 matches found

CNNVD
CNNVD
added 2026/01/16 12:00 a.m.16 views

WordPress plugin WP Recipe Maker has a vulnerability related to information leakage.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

4.3CVSS5.8AI score0.00332EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/01/13 7:12 p.m.20 views

orval MCP client is vulnerable to a code injection attack.

Impact The MCP server generation logic relies on string manipulation that incorporates the summary field from the OpenAPI specification without proper validation or escaping. This allows an attacker to "break out" of the string literal and inject arbitrary code. Here is an example OpenAPI with th...

9.8CVSS6.9AI score0.0079EPSS
SaveExploits2References4Affected Software1
OSV
OSV
added 2026/01/13 7:12 p.m.23 views

GHSA-MWR6-3GP8-9JMJ orval MCP client is vulnerable to a code injection attack.

Impact The MCP server generation logic relies on string manipulation that incorporates the summary field from the OpenAPI specification without proper validation or escaping. This allows an attacker to "break out" of the string literal and inject arbitrary code. Here is an example OpenAPI with th...

9.3CVSS6.9AI score0.0079EPSS
SaveExploits2References4
EUVD
EUVD
added 2026/01/13 7:12 p.m.10 views

EUVD-2026-2002

orval MCP client is vulnerable to a code injection attack...

9.3CVSS6.9AI score0.0079EPSS
SaveExploits2References3
NVD
NVD
added 2026/01/12 7:16 p.m.14 views

CVE-2026-22785

orval generates type-safe JS clients TypeScript from any valid OpenAPI v3 or Swagger v2 specification. Prior to 7.18.0, the MCP server generation logic relies on string manipulation that incorporates the summary field from the OpenAPI specification without proper validation or escaping. This allo...

9.8CVSS0.0079EPSS
SaveExploits2References2
CVE
CVE
added 2026/01/12 6:43 p.m.68 views

CVE-2026-22785

Summary: Orval (MCP client/server code path) is vulnerable to arbitrary code execution via unsanitized input in OpenAPI specs. The CVE-2026-22785/MCP issue arises from string-manipulation in the MCP server generation logic that embeds the summary field without proper validation/escaping, allowing...

9.8CVSS6.6AI score0.0079EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2026/01/12 6:43 p.m.11 views

CVE-2026-22785 orval MCP client is vulnerable to a code injection attack.

orval generates type-safe JS clients TypeScript from any valid OpenAPI v3 or Swagger v2 specification. Prior to 7.18.0, the MCP server generation logic relies on string manipulation that incorporates the summary field from the OpenAPI specification without proper validation or escaping. This allo...

9.3CVSS6.9AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/12 6:43 p.m.31 views

CVE-2026-22785 orval MCP client is vulnerable to a code injection attack.

orval generates type-safe JS clients TypeScript from any valid OpenAPI v3 or Swagger v2 specification. Prior to 7.18.0, the MCP server generation logic relies on string manipulation that incorporates the summary field from the OpenAPI specification without proper validation or escaping. This allo...

9.3CVSS0.0079EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2026/01/12 12:00 a.m.10 views

orval 命令注入漏洞

Orval is an interface development tool from Orval Open Source. A command injection vulnerability exists in versions prior to orval 7.18.0 that stems from the MCP server generation logic not properly validating or escaping the summary field of the OpenAPI specification, which could lead to arbitra...

9.8CVSS7.7AI score0.0079EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2026/01/12 12:00 a.m.9 views

PT-2026-2296

Name of the Vulnerable Software and Affected Versions orval versions prior to 7.18.0 Description orval generates type-safe JS clients TypeScript from OpenAPI specifications. Before version 7.18.0, the server generation logic in the MCP component used string manipulation on the summary field from...

9.3CVSS5.6AI score0.0079EPSS
SaveExploits2References11
RedhatCVE
RedhatCVE
added 2026/01/09 9:18 a.m.11 views

CVE-2025-23887

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in scottwallick Blog Summary blog-summary allows Stored XSS.This issue affects Blog Summary: from n/a through = 0.1.2 β...

6.5CVSS7.2AI score0.00371EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:05 a.m.13 views

CVE-2024-41943

I, Librarian is an open-source version of a PDF managing SaaS. PDF notes are displayed on the Item Summary page without any form of validation or sanitation. An attacker can exploit this vulnerability by inserting a payload in the PDF notes that contains malicious code or script. This code will...

4.6CVSS7.1AI score0.00279EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:59 a.m.11 views

CVE-2023-49334

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report...

8.8CVSS8AI score0.03005EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/12/25 1:04 a.m.8 views

SUSE CVE-2022-50753

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on summary info As Wenqing Liu reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216456 BUG: KASAN: use-after-free in recoverdata+0x63ae/0x6ae0 f2fs Read of size 4 at addr...

7.8CVSS6.6AI score0.002EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/24 3:30 p.m.12 views

EUVD-2022-55808

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on summary info As Wenqing Liu reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216456 BUG: KASAN: use-after-free in recoverdata+0x63ae/0x6ae0 f2fs Read of size 4 at addr...

6AI score0.002EPSS
SaveExploits0References7
NVD
NVD
added 2025/12/24 1:16 p.m.14 views

CVE-2022-50753

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on summary info As Wenqing Liu reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216456 BUG: KASAN: use-after-free in recoverdata+0x63ae/0x6ae0 f2fs Read of size 4 at addr...

7.8CVSS0.002EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2025/12/24 1:16 p.m.8 views

CVE-2022-50753

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on summary info As Wenqing Liu reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216456 BUG: KASAN: use-after-free in recoverdata+0x63ae/0x6ae0 f2fs Read of size 4 at addr...

7.8CVSS5.8AI score0.002EPSS
SaveExploits0References7
OSV
OSV
added 2025/12/24 1:16 p.m.11 views

UBUNTU-CVE-2022-50753

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on summary info As Wenqing Liu reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216456 BUG: KASAN: use-after-free in recoverdata+0x63ae/0x6ae0 f2fs Read of size 4 at addr...

7.8CVSS5.7AI score0.002EPSS
SaveExploits0References8
OSV
OSV
added 2025/12/24 1:05 p.m.9 views

CVE-2022-50753 f2fs: fix to do sanity check on summary info

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on summary info As Wenqing Liu reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216456 BUG: KASAN: use-after-free in recoverdata+0x63ae/0x6ae0 f2fs Read of size 4 at addr...

7.8CVSS6.4AI score
SaveExploits0References9
CVE
CVE
added 2025/12/24 1:05 p.m.36 views

CVE-2022-50753

CVE-2022-50753 = Linux kernel f2fs: fix to sanity check on summary info. Root cause: SSA table corruption (ofs_in_node > ADDRS_PER_PAGE) caused out-of-range reads during recovery; patch adds sanity checks in recovery and GC flows to prevent use-after-free in recover_data paths. Affected code: ...

7.8CVSS6.2AI score0.002EPSS
SaveExploits0References6
Rows per page
Query Builder