كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 5 من 5

• منخفضةCVE-2026-63650درجة CVSS 2.014‏/08‏/2026

  OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field

  CWE-115CWE-295
• حرجةCVE-2026-17566درجة CVSS 9.931‏/07‏/2026

  pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query into a Jinja template and passing the rendered line to psql via --command. To stop an attacker from breaking out of the (...) wrapper, create_

  CWE-78CWE-115pgadmin pgadmin_4
• حرجةCVE-2026-17351درجة CVSS 9.031‏/07‏/2026

  The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_query tool to parse, via sqlparse, as exactly one non-transaction-control statement before running it inside a BEGIN TRANSACTION READ ONLY wra

  CWE-89CWE-115pgadmin pgadmin_4
• منخفضةCVE-2026-42004درجة CVSS 3.725‏/06‏/2026

  An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS option(s) that DNSdist did not filter.

  CWE-115
• متوسطةCVE-2026-12491درجة CVSS 4.817‏/06‏/2026

  A flaw was found in vLLM, an open-source library for large language model inference. This vulnerability arises from improper handling of image metadata, specifically EXIF orientation and PNG transparency (tRNS) data, during image processing. When images are co

  CWE-115