Export limit exceeded: 23755 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (373106 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-67531 1 Agentfront 1 Frontmcp 2026-08-06 N/A
FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 1.5.7, the sandboxed codecall:execute tool exposes live host Zod schema instances to the script via getTool(), and because Zod v4 defines _zod as a non-configurable, non-writable own property, the ECMAScript Proxy invariants force the security membrane to hand back the raw host object, letting a script reach _zod.constr.constructor (the host Function constructor) and execute arbitrary code in the server process. A single tools/call is sufficient to escape the sandbox and achieve remote code execution as the server user, exposing everything the process holds such as OAuth client secrets, JWT_SECRET, session keys, database credentials, and cloud instance metadata. Because the framework's DEFAULT_AUTH_OPTIONS is public mode, an unconfigured server serves this to unauthenticated callers, and on authenticated servers an indirect prompt injection in tool output or fetched content can trigger it without a human attackerThis issue is fixed in version 1.5.7.
CVE-2023-54389 2026-08-06 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2026-70442 2026-08-06 4.3 Medium
Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to use.
CVE-2023-54388 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54387 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54386 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54385 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54384 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54383 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; never assigned.
CVE-2023-54382 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54381 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54380 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54379 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54378 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54377 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54376 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2023-54375 2026-08-05 N/A
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.
CVE-2026-67977 2026-08-05 7.5 High
An integer overflow in the Svc::FileDownlink::SendPartial component of fprime framework v4.2.2 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2026-70427 1 Jenkins Project 1 Jenkins 2026-08-05 4.3 Medium
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names during the extraction of `.tar` and `.tar.gz` archives, allowing attackers able to control agent processes to provide crafted archives to the controller to write files to arbitrary locations on the file system, restricted only by file system access permissions of the user running Jenkins.
CVE-2026-70431 1 Jenkins Project 1 Jenkins Multijob Plugin 2026-08-05 8.8 High
Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.