過去6か月のすべてのCVEを、毎日更新します。

5件中5件を表示

• 高CVE-2026-47162CVSSスコア 8.82026/06/11

  Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths t

  CWE-74CWE-94CWE-140vim vim
• 高CVE-2026-6322CVSSスコア 7.52026/05/05

  fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with

  CWE-436CWE-140openjsf fast-uri
• 中CVE-2026-33457CVSSスコア 6.32026/04/10

  Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands via a crafted service name parameter due to insufficient sanitization of the service descriptio

  CWE-140checkmk checkmk
• 高CVE-2026-33456CVSSスコア 7.62026/04/10

  Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.

  CWE-140checkmk checkmk
• 中CVE-2026-33455CVSSスコア 6.32026/04/10

  Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input sanitization in search filter plugins.

  CWE-140checkmk checkmk