Lucene search
+L

5376 matches found

CNNVD
CNNVD
added 2025/07/08 12:0 a.m.6 views

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...

7.8CVSS6.4AI score0.0036EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/08 12:0 a.m.8 views

Microsoft Hyper-V 输入验证错误漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An input validation error vulnerability exists in Microsoft Hyper-V. An attacker exploiting this vulnerability could gain access to sensitive...

5.7CVSS6.3AI score0.00558EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/08 12:0 a.m.8 views

PHOENIX CONTACT CHARX SEC 输入验证错误漏洞

The PHOENIX CONTACT CHARX SEC is a series of AC charge controllers from PHOENIX CONTACT, Germany. The PHOENIX CONTACT CHARX SEC suffers from an input validation error vulnerability that originates from a local attacker who can exploit a vulnerable script via SSH and elevate privileges to root due...

7.8CVSS6.5AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/07 12:0 a.m.7 views

Better Auth 输入验证错误漏洞

Better Auth is a TypeScript's most comprehensive authentication framework open-sourced by Better Auth. An input validation error vulnerability exists in versions of Better Auth prior to 1.2.10, which stems from the presence of an open redirect in the originCheck middleware function, which could...

5.3CVSS6.5AI score0.00334EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/07/07 12:0 a.m.11 views

Hugging Face Transformers 输入验证错误漏洞

Hugging Face Transformers is Hugging Face's open source advanced natural language processing for Jax, PyTorch and TensorFlow. An input validation error vulnerability exists in Hugging Face Transformers version 4.49.0 and earlier, which stems from insufficient URL validation in imageutils.py and...

3.5CVSS4.6AI score0.00337EPSS
SaveExploits1References3
NVD
NVD
added 2025/07/04 10:15 p.m.7 views

CVE-2025-53366

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually...

8.7CVSS0.05981EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/04 10:6 p.m.7 views

GHSA-3QHF-M339-9G5V MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS

A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Thank y...

8.7CVSS5.8AI score0.05981EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2025/07/04 10:6 p.m.16 views

MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS

A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Thank y...

8.7CVSS6.3AI score0.05981EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
added 2025/07/04 10:5 p.m.16 views

CVE-2025-53366 MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually...

8.7CVSS0.05981EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/04 10:5 p.m.6 views

CVE-2025-53366 MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually...

8.7CVSS6.6AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/07/04 10:5 p.m.3 views

CVE-2025-53366 MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually...

8.7CVSS7.1AI score0.05981EPSS
SaveExploits0References3
CVE
CVE
added 2025/07/04 10:5 p.m.46 views

CVE-2025-53366

CVE-2025-53366 relates to the MCP Python SDK (PyPI: mcp). Before version 1.9.4, a validation error can trigger an unhandled exception when processing malformed requests, resulting in service unavailability (HTTP 500) that requires manual restart. The issue varies by deployment conditions and resi...

8.7CVSS6.4AI score0.05981EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/07/04 12:0 a.m.5 views

OpenBao Input Validation Error Vulnerability

OpenBao is OpenBao open source a sensitive data management software . OpenBao has an input validation error vulnerability that can be exploited by an attacker to cause a denial of service...

7.5CVSS6.8AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/04 12:0 a.m.8 views

Monitorr 输入验证错误漏洞

Monitorr is a web front-end for Monitorr open source. It is used to display the status of any web application or service in real time. An input validation error vulnerability exists in Monitorr 1.7.6m and earlier versions, which stems from improper input validation due to incorrect manipulation o...

8.1CVSS4.6AI score0.00437EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/07/04 12:0 a.m.10 views

PT-2025-28027

Name of the Vulnerable Software and Affected Versions: MCP Python SDK versions prior to 1.9.4 Description: A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability until manually restarted. The impact may vary...

8.7CVSS5.2AI score0.05981EPSS
SaveExploits0References19
CNNVD
CNNVD
added 2025/07/04 12:0 a.m.8 views

CHMLib 输入验证错误漏洞

CHMLib is a library of functions for working with CHM files from the individual developers of jedwing. An input validation error vulnerability exists in CHMLib 2bef8d0 and earlier versions, which stems from a chmdecompressblock integer overflow that could result in a heap buffer overflow...

5.6CVSS7AI score0.00154EPSS
SaveExploits0References4
CNVD
CNVD
added 2025/07/01 12:0 a.m.8 views

COVID19 Testing Management System Input Validation Error Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System has an input validation error vulnerability that originates from an open redirect due to the operation of the parameter q in the file /search-report-result.php. No detai...

6.1CVSS4.7AI score0.0021EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/27 6:18 p.m.18 views

CVE-2025-5824

Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Autel MaxiCharger AC Wallbox Commercial. An attacker must first obtain the ability to pai...

5CVSS5AI score0.00146EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/26 12:0 a.m.8 views

xxl-sso 输入验证错误漏洞

xxl-sso is a distributed single sign-on framework by individual developer Xu Xue Li. An input validation error vulnerability exists in xxl-sso version 1.1.0, which is caused by incorrect operation of the redirecturl parameter in file /xxl-sso-server/doLogin, resulting in an open redirect...

6.1CVSS4.6AI score0.00264EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/06/26 12:0 a.m.10 views

n8n 输入验证错误漏洞

n8n is a scalable workflow automation tool from n8n open source. An input validation error vulnerability exists in n8n versions prior to 1.98.0, which stems from an open redirection vulnerability in the login process that could lead to a phishing attack...

5.4CVSS6.3AI score0.00198EPSS
SaveExploits0References5
Rows per page
Query Builder