https://vulnogram.org/ Most recent CVEs assigned by Alibaba, Inc. (alibaba). https://vulnogram.org/seaview/icons/alibaba.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-9680 https://vulnogram.org/CVE-2026-9680 Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default. Medium Network Exploitable Tue, 28 Jul 2026 09:05:30 GMT https://vulnogram.org/CVE-2026-16723 https://vulnogram.org/CVE-2026-16723 A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required. Critical Network Exploitable Thu, 23 Jul 2026 08:26:24 GMT https://vulnogram.org/CVE-2026-6328 https://vulnogram.org/CVE-2026-6328 Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux (QUIC protocol implementation, packet processing module, STREAM frame handler modules) allows Protocol Manipulation.This i… High Network Exploitable Wed, 15 Apr 2026 03:18:10 GMT https://vulnogram.org/CVE-2026-1788 https://vulnogram.org/CVE-2026-1788 : Out-of-bounds Write vulnerability in Xquic Project Xquic Server xquic on Linux (QUIC protocol implementation, packet processing module modules) allows : Buffer Manipulation.This issue affects Xquic Server: through 1.8.3. Medium Network Exploitable Tue, 03 Feb 2026 03:22:48 GMT https://vulnogram.org/CVE-2021-33800 https://vulnogram.org/CVE-2021-33800 In Druid 1.2.3, visiting the path with parameter in a certain function can lead to directory traversal. Wed, 03 Nov 2021 19:09:33 GMT