كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 4 من 4

• عاليةCVE-2026-22068درجة CVSS 8.229‏/07‏/2026

  Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through 9.2.14. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.

  CWE-777apache traffic_server
• متوسطةCVE-2026-56021درجة CVSS 5.318‏/06‏/2026

  Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

  CWE-185CWE-777webmin webmin
• عاليةCVE-2026-40110درجة CVSS 7.305‏/05‏/2026

  Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins against the allow_origin_pat configuration value. Because re.match() only anchors at the

  CWE-777CWE-625jupyter jupyter_server
• متوسطةCVE-2026-39087درجة CVSS 6.423‏/04‏/2026

  ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.

  CWE-777CWE-94