過去6か月のすべてのCVEを、毎日更新します。

4件中4件を表示

• 中CVE-2026-90813CVSSスコア 4.32026/09/14

  A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order:

  CWE-179CWE-180
• 高CVE-2026-49414CVSSスコア 7.82026/06/27

  The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was

  CWE-179freebsd freebsd
• 低CVE-2026-3832CVSSスコア 3.72026/04/30

  A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses

  CWE-179gnu gnutlsredhat hardened_imagesredhat openshift_container_platform
• 中CVE-2026-32305CVSSスコア 5.32026/03/20

  Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea.1 are vulnerable to mTLS bypass through the TLS SNI pre-sniffing logic related to fragmented ClientHello packets. When a TLS ClientHello is

  CWE-287CWE-1188CWE-179traefik traefik