2099564 matches found
MINI-GRXM-CG79-MRCC
Bulletin has no description...
MINI-Q5JH-C334-FQQ5
Bulletin has no description...
MINI-MQQR-CVQP-4XF5
Bulletin has no description...
MINI-9X75-W734-HRG7
Bulletin has no description...
MINI-5JPH-GPPX-V3VX
Bulletin has no description...
GHSA-3JP5-3H47-28QF Semantic MediaWiki has reflected XSS in Special:Ask plain table headers
Failure mode When headers=plain, table header text was emitted into via a raw HTML path. User-controlled mainlabel content could therefore become executable HTML. Remediation - TableResultPrinter now applies output-context escaping before passing plain headers to the table renderer. - The fix is...
CVE-2026-77301 adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)
adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before validating that value against the actual compressed data and decompression result. A...
CVE-2026-77339 Process Compose: Browser DNS rebinding lets websites control local process-compose MCP tools
Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to /sse and the returned message endpoint without validating the Host header, validating the Origin header, or...
CGA-HVJJ-7P9V-QH8X
Bulletin has no description...
CGA-7W5C-949C-F4QF
Bulletin has no description...
CGA-JRGP-VPHM-3CGV
Bulletin has no description...
CGA-4W6M-W755-59CG
Bulletin has no description...
CGA-QPF3-7JVP-R4CM
Bulletin has no description...
CGA-7QQX-J9VR-5RJ3
Bulletin has no description...
CGA-49CQ-W5FX-452Q
Bulletin has no description...
CGA-VQJC-4FRR-X4QC
Bulletin has no description...
CGA-8W3P-W59V-HVP6
Bulletin has no description...
CGA-F52Q-C5VR-XH9M
Bulletin has no description...
CGA-Q69H-JG69-X56W
Bulletin has no description...
CGA-98F3-R47X-GX7M
Bulletin has no description...
CGA-5393-CXR9-7HH7
Bulletin has no description...
CGA-G9X9-M28H-8C6P
Bulletin has no description...
CGA-W4V5-5Q2P-W773
Bulletin has no description...
CGA-QQR8-Q25Q-9JCH
Bulletin has no description...
CGA-J7J9-PMF5-Q67X
Bulletin has no description...
CGA-Q9J7-8G7J-QP4M
Bulletin has no description...
CGA-6MRW-C4V7-Q2M3
Bulletin has no description...
CGA-QV78-WQX4-542G
Bulletin has no description...
CGA-CJ9R-639Q-RC3R
Bulletin has no description...
CGA-JG25-3H5W-52JC
Bulletin has no description...
CGA-7RHQ-9828-2F8H
Bulletin has no description...
CGA-97CR-3C7R-247R
Bulletin has no description...
CGA-9RV7-PWG6-VQQQ
Bulletin has no description...
CGA-6MW6-HC47-5HX7
Bulletin has no description...
MINI-722M-66M4-8QV4
Bulletin has no description...
CVE-2026-58197 ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement
ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol servers. Prior to ToolHive CLI 0.30.1 and ToolHive Studio 0.38.0, locally run MCP server containers use the default network permission profile without network isolation, permitting access to...
MINI-W75V-P75P-93V3
Bulletin has no description...
MINI-CH2C-684W-F7R5
Bulletin has no description...
MINI-G79C-RHC7-GQRX
Bulletin has no description...
MINI-5JRR-4JXG-C9X4
Bulletin has no description...
MINI-C7RW-G7CV-RRRF
Bulletin has no description...
MINI-H5FJ-5866-G62H
Bulletin has no description...
MINI-XH22-P4P2-H9X9
Bulletin has no description...
MINI-FGQW-54G8-CCJH
Bulletin has no description...
MINI-WV6G-MRG3-68J6
Bulletin has no description...
MINI-2QJ5-MFRW-74R4
Bulletin has no description...
MINI-VJRH-352F-PJ97
Bulletin has no description...
MINI-F4QG-22CH-H6CR
Bulletin has no description...