كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 3 من 3

• متوسطةCVE-2026-17495درجة CVSS 5.915‏/09‏/2026

  moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale() can bypass the locale-name path-traversal guard. The guard assum

  CWE-27
• عاليةCVE-2026-76344درجة CVSS 7.719‏/08‏/2026

  In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could write dispatch metadata to an arbitrary location on the host by supplying a crafted search identifier to a Representation

  CWE-27splunk splunk
• عاليةCVE-2026-62391درجة CVSS 8.131‏/07‏/2026

  The security fix for CVE-2025-66518 is incomplete. Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.session.local.dir.allowlist via unprefixed Spark config aliases. This issue affects Apache K

  CWE-22CWE-27apache kyuubi