Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:22"
1,024 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-66777 |
medium | 5.9 | 0.0044 | 2026-08-11 | SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to bac | |
CVE-2026-54250 |
medium | 5.8 | 0.0017 | 2026-06-25 | K3s is a fully conformant production-ready Kubernetes distribution. Prior to 1.35.3+k3s1, 1.34.6+k3s | |
CVE-2026-56066 |
medium | 5.8 | 0.0047 | 2026-06-26 | Unauthenticated Arbitrary File Deletion in ShortPixel Adaptive Images <= 3.11.4 versions. | |
CVE-2026-44440 |
medium | 5.7 | 0.0036 | 2026-05-13 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.101.1 and 16.10.0, | |
CVE-2026-35363 |
medium | 5.6 | 0.0017 | 2026-04-22 | A vulnerability in the rm utility of uutils coreutils allows the bypass of safeguard mechanisms inte | |
CVE-2026-110231 |
medium | 5.6 | 0.0027 | 2026-10-13 | muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers | |
CVE-2026-114606 |
medium | 5.6 | 0.0019 | 2026-10-22 | draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulne | |
CVE-2026-70084 |
medium | 5.5 | 0.0050 | 2026-10-13 | Improper access control in Windows Projected File System allows an authorized attacker to disclose i | |
CVE-2026-115207 |
medium | 5.5 | 0.0014 | 2026-10-22 | A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended | |
CVE-2026-116602 |
medium | 5.5 | 0.0047 | 2026-10-26 | A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects t | |
CVE-2026-45496 |
medium | 5.5 | 0.0047 | 2026-07-14 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code | |
CVE-2026-5258 |
medium | 5.5 | 0.0063 | 2026-04-01 | A vulnerability was found in Sanster IOPaint 1.5.3. Impacted is the function _get_file of the file i | |
CVE-2026-5638 |
medium | 5.5 | 0.0049 | 2026-04-06 | A vulnerability was detected in HerikLyma CPPWebFramework up to 3.1. This issue affects some unknown | |
CVE-2026-5841 |
medium | 5.5 | 0.0063 | 2026-04-09 | A weakness has been identified in Tenda i3 1.0.0.6(2204). The affected element is the function R7Web | |
CVE-2026-5849 |
medium | 5.5 | 0.0063 | 2026-04-09 | A vulnerability was determined in Tenda i12 1.0.0.11(3862). The impacted element is an unknown funct | |
CVE-2026-5962 |
medium | 5.5 | 0.0054 | 2026-04-09 | A vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R7WebsSecur | |
CVE-2026-5998 |
medium | 5.5 | 0.0063 | 2026-04-10 | A flaw has been found in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects the function | |
CVE-2026-6024 |
medium | 5.5 | 0.0069 | 2026-04-10 | A vulnerability was determined in Tenda i6 1.0.0.7(2204). Affected by this issue is the function R7W | |
CVE-2026-6568 |
medium | 5.5 | 0.0051 | 2026-04-19 | A vulnerability was determined in kodcloud KodExplorer up to 4.52. This affects the function share.c | |
CVE-2026-6615 |
medium | 5.5 | 0.0050 | 2026-04-20 | A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue i | |
CVE-2026-7036 |
medium | 5.5 | 0.0054 | 2026-04-26 | A vulnerability was identified in Tenda i9 1.0.0.5(2204). This vulnerability affects the function R7 | |
CVE-2026-7059 |
medium | 5.5 | 0.0044 | 2026-04-26 | A vulnerability was found in 666ghj MiroFish up to 0.1.2. This affects the function get_simulation_p | |
CVE-2026-7132 |
medium | 5.5 | 0.0044 | 2026-04-27 | A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. This affects the | |
CVE-2026-7149 |
medium | 5.5 | 0.0041 | 2026-04-27 | A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca787fbc1dc92 | |
CVE-2026-7159 |
medium | 5.5 | 0.0043 | 2026-04-27 | A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function read_do | |
CVE-2026-7234 |
medium | 5.5 | 0.0043 | 2026-04-28 | A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the | |
CVE-2026-7235 |
medium | 5.5 | 0.0046 | 2026-04-28 | A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to b185aa7ff0d864 | |
CVE-2026-7237 |
medium | 5.5 | 0.0045 | 2026-04-28 | A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27. Affected by this issue is some un | |
CVE-2026-7271 |
medium | 5.5 | 0.0048 | 2026-04-28 | A vulnerability was detected in DV0x creative-ad-agent up to 751b9e5146604dc65049bd0f62dcbdad6212f8a | |
CVE-2026-7272 |
medium | 5.5 | 0.0042 | 2026-04-28 | A flaw has been found in WilliamCloudQi matlab-mcp-server up to ab88f6b9bf5f36f725e8628029f7f6dd0d99 | |
CVE-2026-7384 |
medium | 5.5 | 0.0042 | 2026-04-29 | A vulnerability was detected in ezequiroga mcp-bases 357ca19c7a49a9b9cb2ef639b366f03aba8bea39/c630b8 | |
CVE-2026-7386 |
medium | 5.5 | 0.0043 | 2026-04-29 | A flaw has been found in fatbobman mail-mcp-bridge up to 1.3.3. Affected is an unknown function of t | |
CVE-2026-7400 |
medium | 5.5 | 0.0043 | 2026-04-29 | A security vulnerability has been detected in geekgod382 filesystem-mcp-server 1.0.0. This issue aff | |
CVE-2026-7403 |
medium | 5.5 | 0.0056 | 2026-04-29 | A security flaw has been discovered in geldata gel-mcp 0.1.0. This impacts the function list_rules/f | |
CVE-2026-7404 |
medium | 5.5 | 0.0051 | 2026-04-29 | A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected is the func | |
CVE-2026-7519 |
medium | 5.5 | 0.0042 | 2026-05-01 | A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function of | |
CVE-2026-7588 |
medium | 5.5 | 0.0045 | 2026-05-01 | A vulnerability was found in ggerve coding-standards-mcp. This issue affects the function get_style_ | |
CVE-2026-7589 |
medium | 5.5 | 0.0045 | 2026-05-01 | A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c9 | |
CVE-2026-7594 |
medium | 5.5 | 0.0042 | 2026-05-01 | A vulnerability was detected in Flux159 mcp-game-asset-gen 0.1.0. Affected is the function image_to_ | |
CVE-2026-7645 |
medium | 5.5 | 0.0046 | 2026-05-02 | A vulnerability was found in ruvnet sublinear-time-solver 1.5.0. Affected by this vulnerability is t | |
CVE-2026-7784 |
medium | 5.5 | 0.0050 | 2026-05-05 | A vulnerability has been found in RTGS2017 NagaAgent up to 5.1.0. This issue affects some unknown pr | |
CVE-2026-7788 |
medium | 5.5 | 0.0041 | 2026-05-05 | A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560 | |
CVE-2026-7810 |
medium | 5.5 | 0.0041 | 2026-05-05 | A flaw has been found in UsamaK98 python-notebook-mcp up to a05a232815809a7e425b5fa7be26e0d4369894c2 | |
CVE-2026-7811 |
medium | 5.5 | 0.0042 | 2026-05-05 | A vulnerability has been found in 54yyyu code-mcp up to 4cfc4643541a110c906d93635b391bf7e357f4a8. Th | |
CVE-2026-8115 |
medium | 5.5 | 0.0057 | 2026-05-07 | A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4. This affects an unk | |
CVE-2026-41612 |
medium | 5.5 | 0.0050 | 2026-05-12 | Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose informatio | |
CVE-2026-46383 |
medium | 5.5 | 0.0045 | 2026-05-15 | Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, | |
CVE-2026-8755 |
medium | 5.5 | 0.0061 | 2026-05-17 | A flaw has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934c. The af | |
CVE-2026-8756 |
medium | 5.5 | 0.0051 | 2026-05-17 | A vulnerability has been found in fishaudio Bert-VITS2 up to 8f7fbd8c4770965225d258db548da27dc8dd934 | |
CVE-2026-49406 |
medium | 5.5 | 0.0018 | 2026-06-23 | Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.12, when Deno was run in BYO |