كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 6 من 6

• متوسطةCVE-2025-36076درجة CVSS 4.318‏/09‏/2026

  IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks against the system.

  CWE-540
• حرجةCVE-2026-84390درجة CVSS 9.811‏/09‏/2026

  A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via <insert attack vector here>

  CWE-540
• متوسطةCVE-2026-16581درجة CVSS 5.328‏/07‏/2026

  In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication con

  CWE-540
• عاليةCVE-2026-45728درجة CVSS 7.526‏/05‏/2026

  Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is invoked with a single file path instead of a directory, singleFileMode is set to true and debugMode is forcibly enabled. debugMode activates the PrettyError renderer, whic

  CWE-209CWE-489CWE-540
• عاليةCVE-2026-4155درجة CVSS 7.511‏/04‏/2026

  ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ChargePoint Home Flex charging stations. Aut

  CWE-540chargepoint home_flex_cph50_firmwarechargepoint home_flex_cph50
• متوسطةCVE-2026-35383درجة CVSS 6.502‏/04‏/2026

  Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some web pages. An unauthenticated attacker could use this token to enumerate or delete certain assets. As of 2026-03-27, the token is no longer present in the web pages and cann

  CWE-540