كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 5 من 5

• عاليةCVE-2026-47162درجة CVSS 8.811‏/06‏/2026

  Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths t

  CWE-74CWE-94CWE-140vim vim
• عاليةCVE-2026-6322درجة CVSS 7.505‏/05‏/2026

  fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with

  CWE-436CWE-140openjsf fast-uri
• متوسطةCVE-2026-33457درجة CVSS 6.310‏/04‏/2026

  Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands via a crafted service name parameter due to insufficient sanitization of the service descriptio

  CWE-140checkmk checkmk
• عاليةCVE-2026-33456درجة CVSS 7.610‏/04‏/2026

  Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.

  CWE-140checkmk checkmk
• متوسطةCVE-2026-33455درجة CVSS 6.310‏/04‏/2026

  Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input sanitization in search filter plugins.

  CWE-140checkmk checkmk