كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 3 من 3

• متوسطةCVE-2026-15305درجة CVSS 6.314‏/07‏/2026

  Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with allowedMimeTypes configured. The restriction was not enforced server-side because the MimeTypeValidator was registered during form building before

  CWE-351
• عاليةCVE-2025-31951درجة CVSS 8.806‏/05‏/2026

  HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability. A flaw in a component's input handling was identified that could permit unauthorized command execution.

  CWE-77CWE-351CWE-451
• متوسطةCVE-2026-41341درجة CVSS 5.423‏/04‏/2026

  OpenClaw before 2026.3.31 contains a logic error in Discord component interaction routing that misclassifies group direct messages as direct messages in extensions/discord/src/monitor/agent-components-helpers.ts. Attackers can exploit this misclassification to

  CWE-351openclaw openclaw