Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:918"
679 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-62216 |
low | 2.3 | 0.0029 | 2026-07-17 | OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A low | |
CVE-2026-73087 |
low | 2.3 | 0.0046 | 2026-08-11 | Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SS | |
CVE-2026-115752 |
low | 2.3 | 0.0018 | 2026-10-23 | Signal K Server from 2.28.0-beta.2 before 2.34.0 contains a server-side request forgery vulnerabilit | |
CVE-2026-41321 |
low | 2.2 | 0.0024 | 2026-04-24 | @astrojs/cloudflare is an SSR adapter for use with Cloudflare Workers targets. Prior to 13.1.10, the | |
CVE-2025-15098 |
low | 2.1 | 0.0030 | 2025-12-26 | A vulnerability was determined in YunaiV yudao-cloud up to 2025.11. This affects the function BpmHtt | |
CVE-2026-5259 |
low | 2.1 | 0.0020 | 2026-04-01 | A vulnerability was determined in AutohomeCorp frostmourne up to 1.0. The affected element is an unk | |
CVE-2026-6111 |
low | 2.1 | 0.0026 | 2026-04-12 | A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the functi | |
CVE-2026-6119 |
low | 2.1 | 0.0026 | 2026-04-12 | A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the func | |
CVE-2026-6497 |
low | 2.1 | 0.0027 | 2026-04-17 | A vulnerability was determined in prasathmani TinyFileManager up to 2.6. Affected by this vulnerabil | |
CVE-2026-6587 |
low | 2.1 | 0.0028 | 2026-04-20 | A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the | |
CVE-2026-6616 |
low | 2.1 | 0.0022 | 2026-04-20 | A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects | |
CVE-2026-6617 |
low | 2.1 | 0.0020 | 2026-04-20 | A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the function | |
CVE-2026-6618 |
low | 2.1 | 0.0021 | 2026-04-20 | A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai_ | |
CVE-2026-6649 |
low | 2.1 | 0.0021 | 2026-04-20 | A vulnerability was determined in Qibo CMS 1.0. Affected by this issue is some unknown functionality | |
CVE-2026-6979 |
low | 2.1 | 0.0025 | 2026-04-25 | A flaw has been found in devlikeapro WAHA up to 2026.3.4. This affects an unknown function of the fi | |
CVE-2026-6981 |
low | 2.1 | 0.0025 | 2026-04-25 | A vulnerability was found in IhateCreatingUserNames2 AiraHub2 up to 3e4b77fd7d48ed811ffe5b8d222068c1 | |
CVE-2026-7084 |
low | 2.1 | 0.0026 | 2026-04-27 | A vulnerability was found in HBAI-Ltd Toonflow-app up to 1.1.1. This affects the function fetch of t | |
CVE-2026-7150 |
low | 2.1 | 0.0020 | 2026-04-27 | A vulnerability was found in dh1011 auto-favicon up to f189116a9259950c2393f114dbcb94dde0ad864b. Thi | |
CVE-2026-7729 |
low | 2.1 | 0.0021 | 2026-05-04 | A security flaw has been discovered in pixelsock directus-mcp 1.0.0. This issue affects the function | |
CVE-2026-8081 |
low | 2.1 | 0.0022 | 2026-05-07 | A vulnerability has been found in router-for-me CLIProxyAPI 6.9.29. Affected by this issue is some u | |
CVE-2026-44428 |
low | 2.1 | 0.0022 | 2026-05-14 | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. | |
CVE-2026-12774 |
low | 2.1 | 0.0040 | 2026-06-21 | A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnera | |
CVE-2026-12798 |
low | 2.1 | 0.0040 | 2026-06-21 | A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is th | |
CVE-2026-14748 |
low | 2.1 | 0.0028 | 2026-07-05 | A flaw has been found in AIAnytime Awesome-MCP-Server up to a884bb51bcd99e08e14fd712c749d55d9d9a13ab | |
CVE-2026-15317 |
low | 2.1 | 0.0043 | 2026-07-10 | A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. Affected by this vulnerability i | |
CVE-2026-15500 |
low | 2.1 | 0.0037 | 2026-07-12 | A weakness has been identified in AstrBotDevs AstrBot up to 4.25.2. Affected by this vulnerability i | |
CVE-2026-15501 |
low | 2.1 | 0.0035 | 2026-07-12 | A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this iss | |
CVE-2026-15508 |
low | 2.1 | 0.0035 | 2026-07-12 | A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_ta | |
CVE-2026-15525 |
low | 2.1 | 0.0037 | 2026-07-13 | A vulnerability was detected in kLOsk adloop up to 0.9.0. This vulnerability affects the function _v | |
CVE-2026-15619 |
low | 2.1 | 0.0043 | 2026-07-14 | A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function | |
CVE-2026-15620 |
low | 2.1 | 0.0040 | 2026-07-14 | A security vulnerability has been detected in mosaxiv clawlet up to 0.2.10. This affects the functio | |
CVE-2026-15624 |
low | 2.1 | 0.0037 | 2026-07-14 | A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3. Affected by this vulnerabil | |
CVE-2026-15628 |
low | 2.1 | 0.0037 | 2026-07-14 | A security flaw has been discovered in zhayujie chatgpt-on-wechat CowAgent up to 2.1.1. This issue a | |
CVE-2026-15668 |
low | 2.1 | 0.0040 | 2026-07-14 | A vulnerability has been found in louisho5 picobot up to 0.2.0. This vulnerability affects the funct | |
CVE-2026-15750 |
low | 2.1 | 0.0040 | 2026-07-14 | A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the fu | |
CVE-2026-48978 |
low | 2.1 | 0.0021 | 2026-07-17 | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm UR | |
CVE-2026-16074 |
low | 2.1 | 0.0035 | 2026-07-17 | A vulnerability was detected in AstrBotDevs AstrBot up to 4.25.2. This affects the function update_p | |
CVE-2026-16124 |
low | 2.1 | 0.0046 | 2026-07-18 | A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This aff | |
CVE-2026-16194 |
low | 2.1 | 0.0046 | 2026-07-18 | A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function WebFetch. | |
CVE-2026-16196 |
low | 2.1 | 0.0041 | 2026-07-18 | A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrR | |
CVE-2026-16222 |
low | 2.1 | 0.0037 | 2026-07-19 | A vulnerability was found in 1Panel-dev CordysCRM up to 1.4.1. This issue affects some unknown proce | |
CVE-2026-16223 |
low | 2.1 | 0.0037 | 2026-07-19 | A vulnerability was determined in 1Panel-dev CordysCRM up to 1.4.1. Impacted is the function getSqlB | |
CVE-2026-17458 |
low | 2.1 | 0.0040 | 2026-07-26 | A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlay | |
CVE-2026-18774 |
low | 2.1 | 0.0035 | 2026-08-04 | A flaw has been found in NousResearch hermes-agent up to 0.16.0. This affects the function save_url_ | |
CVE-2026-18775 |
low | 2.1 | 0.0038 | 2026-08-04 | A vulnerability has been found in NousResearch hermes-agent up to 0.16.0. This vulnerability affects | |
CVE-2026-19040 |
low | 2.1 | 0.0030 | 2026-08-06 | A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown funct | |
CVE-2026-19246 |
low | 2.1 | 0.0037 | 2026-08-07 | A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function _download_ima | |
CVE-2026-19339 |
low | 2.1 | 0.0037 | 2026-08-09 | A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The im | |
CVE-2026-19340 |
low | 2.1 | 0.0035 | 2026-08-09 | A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown func | |
CVE-2026-19367 |
low | 2.1 | 0.0026 | 2026-08-09 | A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is a |