Lucene search
K

8 matches found

CNNVD
CNNVD
added 2026/05/05 12:0 a.m.8 views

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.4.14 contained security vulnerabilities. These vulnerabilities were due to improper access control in browser snapshots, screenshot generation, and tag routing. As a result,...

7.7CVSS5.8AI score0.00266EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-1367

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.60427EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 6:31 p.m.6 views

CVE-2021-30180

Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dubbo customers may enable calling arbitrary...

9.8CVSS6.8AI score0.60427EPSS
Exploits0References1
OSV
OSV
added 2022/03/18 5:58 p.m.2 views

GHSA-7WFC-X4F7-GG2X Code injection in Apache Dubbo

Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dubbo customers may enable calling arbitrary...

9.8CVSS7.3AI score0.60427EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2022/03/18 5:58 p.m.19 views

Code injection in Apache Dubbo

Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dubbo customers may enable calling arbitrary...

9.8CVSS2.4AI score0.60427EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2021/06/01 2:15 p.m.16 views

CVE-2021-30180

Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dubbo customers may enable calling arbitrary...

9.8CVSS6.8AI score
Exploits0References1
CVE
CVE
added 2021/05/31 7:25 a.m.86 views

CVE-2021-30180

CVE-2021-30180 — Apache Dubbo : Affects Dubbo versions prior to 2.7.9. The vulnerability arises when parsing YAML tag routing rules, which may allow a client to trigger calling arbitrary constructors on the server. This is the underlying root cause described in the initial details. Potential impa...

9.8CVSS9.5AI score0.60427EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/05/31 7:25 a.m.15 views

CVE-2021-30180 Apache Dubbo RCE on customers via Condition route poisoning (Unsafe YAML unmarshaling)

Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dubbo customers may enable calling arbitrary...

9.6AI score0.60427EPSS
Exploits0References1
Rows per page
Query Builder