Categoria: CVE

A vulnerability classified as critical was found in vm2 up to 3.11.0. This vulnerability affects unknown code. Such manipulation leads to os command injection. This vulnerability is listed as CVE-2026-44007. The attack must be...

A vulnerability classified as critical has been found in ciguard. This affects an unknown part. This manipulation causes improper privilege management. This vulnerability is tracked as CVE-2026-44218. The attack is restricted to...

A vulnerability described as critical has been identified in Apache Wicket up to 8.16.x/9.21.x/10.7.x. Affected by this issue is some unknown functionality of the component FolderUploadsFileManager. The manipulation results in...

A vulnerability marked as critical has been reported in Apache Wicket up to 8.16.x/9.21.x/10.7.x. Affected by this vulnerability is an unknown functionality of the component PackageResourceGuard. The manipulation leads to...

A vulnerability labeled as critical has been found in grav. Affected is an unknown function of the component FormFlash. Executing a manipulation can lead to path traversal. The identification of this vulnerability is...

A vulnerability categorized as critical has been discovered in FlowiseAI Flowise up to 3.0.12. Impacted is the function loadOpenApiSpec of the file packages/components/nodes/tools/OpenAPIToolkit/OpenAPIToolkit.ts of the...

A vulnerability was found in FlowiseAI Flowise up to 3.0.12. It has been rated as critical. This issue affects the function validateMCPServerConfig of the component Custom MCP Component. The manipulation leads to server-side...

A vulnerability was found in FlowiseAI Flowise up to 3.0.12. It has been declared as critical. This vulnerability affects the function axios.get of the file packages/components/nodes/documentloaders/API/APILoader.ts of the...

A vulnerability was found in FlowiseAI Flowise up to 3.0.12. It has been classified as problematic. This affects the function verify of the file packages/server/src/enterprise/services/account.service.ts of the component...

A vulnerability was found in FlowiseAI Flowise up to 3.0.12 and classified as critical. Affected by this issue is the function createLead of the component API Endpoint. Such manipulation leads to dynamically-determined object...

A vulnerability, which was classified as problematic, has been found in Paramiko up to 4.0.0. This impacts an unknown function of the file rsakey.py. The manipulation leads to risky cryptographic algorithm. This vulnerability is...

A vulnerability classified as problematic was found in Velocidex Velociraptor up to 0.76.4 on Windows. This affects the function parse_evtx of the component VQL Plugin. Executing a manipulation can lead to off-by-one. This...