كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 2 من 2

• عاليةCVE-2026-35536درجة CVSS 7.203‏/04‏/2026

  In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characters.

  CWE-159tornadoweb tornado
• متوسطةCVE-2026-29106درجة CVSS 5.919‏/03‏/2026

  SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to versions 7.15.1 and 8.9.3, the value of the return_id request parameter is copied into the value of an HTML tag attribute which is an event handl

  CWE-79CWE-80CWE-116suitecrm suitecrm