Export limit exceeded: 22889 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 386096 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 49043 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-66689 2 Beehiveinnovations, Busymac 2 Zen Mcp Server, Pal Mcp Server 2026-01-22 6.5 Medium
A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system. The vulnerability is caused by flawed logic in the is_dangerous_path() validation function that uses exact string matching against a blacklist of system directories. Attackers can bypass these restrictions by accessing subdirectories of blacklisted paths.