過去6か月のすべてのCVEを、毎日更新します。
National Vulnerability Database から直接取得した公開済みの脆弱性です。深刻度、CWE分類、影響を受ける製品つき。検索・絞り込みで、今日公開された分もすぐに確認できます。
- 過去24時間に485件
- 過去7日間に3,041件
- 過去6か月で58,202件
出典：NVD（National Vulnerability Database） · 更新日：2026/09/23
5件中5件を表示
Privilege escalation due to weak configuration while temporary file handling.
osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unprivileged attacker can read the contents of an osquery file carve until the carve completes and the temporary files are deleted because in-pr
In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.py` creates temporary directories with world-writable permissions (0o777), and the `_create_model_downloading_tmp_dir()` function in `mlflow/pyfun
CWE-378lfprojects mlflowOpenClaw before 2026.2.17 creates session transcript JSONL files with overly broad default permissions, allowing local users to read transcript contents. Attackers with local access can read transcript files to extract sensitive information including secrets f
CWE-378openclaw openclawA vulnerability was detected in Enter Software Iperius Backup up to 8.7.3. Affected is an unknown function of the file C:\ProgramData\IperiusBackup\Jobs\ of the component Backup Service. Performing a manipulation results in creation of temporary file with inse