كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 4 من 4

• متوسطةCVE-2026-66323درجة CVSS 5.428‏/08‏/2026

  Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

  CWE-141microsoft edge_chromium
• عاليةCVE-2026-19594درجة CVSS 8.112‏/08‏/2026

  Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal (CWE-22) via unencoded `..` identifier path segments, and HTTP param

  CWE-22CWE-141
• عاليةCVE-2026-20200درجة CVSS 8.805‏/08‏/2026

  A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.  Th

  CWE-141cisco unified_computing_system
• منخفضةCVE-2026-56813درجة CVSS 2.110‏/07‏/2026

  Improper Neutralization of Parameter/Argument Delimiters vulnerability in elixir-plug plug allows an attacker to inject or override HTTP cookie attributes. The Plug.Conn.Cookies.encode/2 function in lib/plug/conn/cookies.ex builds the Set-Cookie response heade

  CWE-141