Tutte le CVE degli ultimi sei mesi, aggiornate ogni giorno.

Mostrate 4 di 4

• MediaCVE-2026-90813Punteggio CVSS 4.314 set 2026

  A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order:

  CWE-179CWE-180
• AltaCVE-2026-49414Punteggio CVSS 7.827 giu 2026

  The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was

  CWE-179freebsd freebsd
• BassaCVE-2026-3832Punteggio CVSS 3.730 apr 2026

  A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses

  CWE-179gnu gnutlsredhat hardened_imagesredhat openshift_container_platform
• MediaCVE-2026-32305Punteggio CVSS 5.320 mar 2026

  Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea.1 are vulnerable to mTLS bypass through the TLS SNI pre-sniffing logic related to fragmented ClientHello packets. When a TLS ClientHello is

  CWE-287CWE-1188CWE-179traefik traefik