كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 3 من 3

• عاليةCVE-2026-76317درجة CVSS 8.819‏/08‏/2026

  In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could move files that the user account running Splunk Enterprise can read into a lookup that the user controls. The user could

  CWE-26splunk splunk
• متوسطةCVE-2026-46747درجة CVSS 4.309‏/06‏/2026

  A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not properly sanitize path input in the `GET /api/sftp/uploadFiles` endpoint used for directory listing. This allows path traversal through craft

  CWE-26siemens sinec_ins
• حرجةCVE-2026-42196درجة CVSS 9.912‏/05‏/2026

  django-s3file is a lightweight file upload input for Django and Amazon S3. Prior to 7.0.2, S3FileMiddleware is vulnerable to relative path traversal attacks, where an attacker can use a modified request to escape pre-signed upload locations and have the Django

  CWE-22CWE-26