최근 6개월의 모든 CVE를 매일 업데이트합니다.

4개 중 4개 표시

• 중간CVE-2026-19636CVSS 점수 5.32026. 8. 14.

  An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.

  CWE-1270tenable security_center
• 중간CVE-2026-15831CVSS 점수 4.32026. 7. 29.

  GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to bypass administrator-configured tool governance policies due to improper

  CWE-1270gitlab gitlab
• 높음CVE-2026-54593CVSS 점수 8.12026. 7. 28.

  Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the Wings /upload/file endpoint accepted any valid panel-signed JWT that contained server_uuid, user_uuid, and unique_id claims without che

  CWE-1259CWE-1270
• 높음CVE-2026-49499CVSS 점수 8.82026. 7. 22.

  Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privil

  CWE-1270dell powerprotect_data_manager