Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
43999
Total
3569
Critical
13202
High
13005
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-79779 | MEDIUM | 5.3 | rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over plaintext HTTP after … | Aug 25, 2026 |
| CVE-2026-79778 | MEDIUM | 5.3 | rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. … | Aug 25, 2026 |
| CVE-2026-79777 | LOW | 2.7 | rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, … | Aug 25, 2026 |
| CVE-2026-79776 | MEDIUM | 5.3 | rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can access … | Aug 25, 2026 |
| CVE-2026-79775 | MEDIUM | 6.5 | rclone versions >= v1.72.0 and <= v1.74.4 (fixed in v1.75.0) contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs … | Aug 25, 2026 |
| CVE-2026-79774 | HIGH | 8.4 | Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\\Twig\\SecurityPolicy that allows authenticated backend users with template-editing permissions … | Aug 25, 2026 |
| CVE-2026-79773 | MEDIUM | 4.9 | Winter CMS before 1.2.13 contains a local file inclusion vulnerability in the JavascriptImporter filter that allows authenticated users with cms.manage_assets permission to disclose arbitrary server-readable … | Aug 25, 2026 |
| CVE-2026-79772 | MEDIUM | 5.3 | Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising … | Aug 25, 2026 |
| CVE-2026-79771 | MEDIUM | 5.3 | Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit this … | Aug 25, 2026 |
| CVE-2026-79770 | HIGH | 7.5 | Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial … | Aug 25, 2026 |
| CVE-2026-79769 | MEDIUM | 5.5 | Nokogiri versions before 1.19.4 contain a possible invalid (out-of-bounds) memory read in the protected internal Node#initialize_copy_with_args helper behind Node#dup and #clone, which unwrapped its source … | Aug 25, 2026 |
| CVE-2026-79676 | MEDIUM | 5.9 | NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open() instead of nltk.pathsec.open(), allowing symlinks to … | Aug 25, 2026 |
| CVE-2026-79675 | CRITICAL | 9.8 | NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers to inject dangerous JVM flags. … | Aug 25, 2026 |
| CVE-2026-79674 | HIGH | 8.2 | NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended data root. Attackers … | Aug 25, 2026 |
| CVE-2026-70550 | MEDIUM | 6.5 | An authorization weakness in JFrog Artifactory Composer repository handling may allow an authenticated user, under specific conditions, to read package metadata from repositories they are … | Aug 25, 2026 |
| CVE-2026-70548 | LOW | 3.5 | Under specific circumstances, low-level user can run request to remote CocoaPods repos via JFrog Artifactory External Dependency. | Aug 25, 2026 |
| CVE-2026-55640 | CRITICAL | 9.1 | Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud instance. Prior to 0.117.2, the POST /webhooks/nextcloud endpoint in nextcloud_mcp_server/vector/webhook_receiver.py … | Aug 25, 2026 |
| CVE-2026-55582 | HIGH | 8.4 | mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default security.yaml allows /usr/bin/git, while security.go omits … | Aug 25, 2026 |
| CVE-2026-55581 | HIGH | 8.4 | mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Docker security.yaml includes /bin/bash in allowed_executables, … | Aug 25, 2026 |
| CVE-2026-55580 | UNKNOWN | — | mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCP_SHELL_SEC_CONFIG_FILE … | Aug 25, 2026 |
| CVE-2026-55546 | CRITICAL | 9.8 | QWED-MCP is a deterministic verification gateway for MCP. Prior to 0.2.1, verify_math_expression() in src/qwed_mcp/engines/math_engine.py passes attacker-controlled expression and claimed_result strings directly to SymPy's parse_expr() after … | Aug 25, 2026 |
| CVE-2026-55539 | HIGH | 8.6 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, the Jobs API create_app function mounts /api/v1/runs without authentication. Any reachable caller can submit jobs, … | Aug 25, 2026 |
| CVE-2026-55536 | CRITICAL | 9.1 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server _handle_connection() checks Chrome extension origins with re.match() and the unanchored expression chrome-extension://[a-z0-9]{32}. Extra … | Aug 25, 2026 |
| CVE-2026-55533 | HIGH | 8.2 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, create_auth_middleware() allows requests when auth=api-key lacks PRAISONAI_API_KEY or JWT authentication lacks PRAISONAI_JWT_SECRET. An externally bound … | Aug 25, 2026 |
| CVE-2026-55532 | HIGH | 7.6 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, MCP HTTP Stream _validate_origin uses request_origin.startswith(allowed), allowing the attacker-controlled localhost.attacker.com HTTP origin to satisfy the … | Aug 25, 2026 |