كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 3 من 3

• حرجةCVE-2026-44006درجة CVSS 10.013‏/05‏/2026

  vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach BaseHandler.getPrototypeOf, which can be used to get arbitrary prototypes. This vulnerability is fixed in 3.11.0.

  CWE-94CWE-914vm2_project vm2
• متوسطةCVE-2026-35173درجة CVSS 6.506‏/04‏/2026

  Chyrp Lite is an ultra-lightweight blogging engine. Prior to 2026.01, an IDOR / Mass Assignment issue exists in the Post model that allows authenticated users with post editing permissions (Edit Post, Edit Draft, Edit Own Post, Edit Own Draft) to modify posts

  CWE-639CWE-914chyrplite chyrp_lite
• حرجةCVE-2026-34444درجة CVSS 10.006‏/04‏/2026

  Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute_filter is not consistently applied when attributes are accessed through built-in functions like getattr and setattr. This allows an attacker to bypass the intended restr

  CWE-284CWE-639CWE-914scoder lupa