كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 4 من 4

• عاليةCVE-2026-92950درجة CVSS 8.617‏/09‏/2026

  vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attackers can supply a malicious script file to the vm2 CLI that uses require(__filename) to re-execute itsel

  CWE-453
• متوسطةCVE-2026-19212درجة CVSS 4.307‏/08‏/2026

  A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WTSTradeDef.hpp of the component TraderATP Cash Trade Conversion. Executing a manipulation of the argument m_offsetType can lead to use of uni

  CWE-453CWE-457
• عاليةCVE-2026-0082درجة CVSS 7.817‏/06‏/2026

  In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interactio

  CWE-453google android
• متوسطةCVE-2026-41330درجة CVSS 4.421‏/04‏/2026

  OpenClaw before 2026.3.31 contains an environment variable override vulnerability in host exec policy that fails to properly enforce proxy, TLS, Docker, and Git TLS controls. Attackers can bypass security controls by overriding environment variables to circumv

  CWE-453openclaw openclaw