최근 6개월의 모든 CVE를 매일 업데이트합니다.

5개 중 5개 표시

• 높음CVE-2026-47162CVSS 점수 8.82026. 6. 11.

  Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths t

  CWE-74CWE-94CWE-140vim vim
• 높음CVE-2026-6322CVSS 점수 7.52026. 5. 5.

  fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with

  CWE-436CWE-140openjsf fast-uri
• 중간CVE-2026-33457CVSS 점수 6.32026. 4. 10.

  Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands via a crafted service name parameter due to insufficient sanitization of the service descriptio

  CWE-140checkmk checkmk
• 높음CVE-2026-33456CVSS 점수 7.62026. 4. 10.

  Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.

  CWE-140checkmk checkmk
• 중간CVE-2026-33455CVSS 점수 6.32026. 4. 10.

  Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input sanitization in search filter plugins.

  CWE-140checkmk checkmk