최근 6개월의 모든 CVE를 매일 업데이트합니다.

5개 중 5개 표시

• 중간CVE-2026-82191CVSS 점수 5.32026. 9. 15.

  Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - A crafted link to the paypal notify endpoint, if followed by a victim's browser (or an automated system that fe

  CWE-1241
• 중간CVE-2026-82190CVSS 점수 6.32026. 9. 15.

  Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Anyone who obtains the site's Joomla `secret` can compute a valid access token for *any* order on the site without ever having plac

  CWE-1241
• 중간CVE-2026-73576CVSS 점수 6.32026. 8. 13.

  In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated using an insecure random number generator, resulting in insufficient entropy. An

  CWE-1241synacor zimbra_collaboration_suite
• 높음CVE-2026-57869CVSS 점수 7.12026. 7. 7.

  Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization. This issue affects MicroRealEstate: through 1

  CWE-639CWE-1241
• 중간CVE-2026-6420CVSS 점수 6.32026. 5. 6.

  A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Keylime verifier. The verifier uses a hardcoded challenge nonce for Trusted Platform Module (TPM) quote

  CWE-1241