كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 3 من 3

• عاليةCVE-2026-76878درجة CVSS 8.419‏/08‏/2026

  In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the presence of the all_projects key rather than its value; a true value enforces the administrator-only poli

  CWE-688
• متوسطةCVE-2026-12311درجة CVSS 4.716‏/06‏/2026

  Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

  CWE-200CWE-688mozilla firefoxmozilla thunderbird
• متوسطةCVE-2026-33549درجة CVSS 6.722‏/03‏/2026

  SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure because of STATUT mishandling.

  CWE-688spip spip