최근 6개월의 모든 CVE를 매일 업데이트합니다.

10개 중 10개 표시

• 중간CVE-2026-40533CVSS 점수 5.32026. 9. 18.

  An exposure of sensitive information through data queries vulnerability in Desktop API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote attackers to obtain non-sensitive information.

  CWE-202
• 중간CVE-2026-77883CVSS 점수 4.92026. 9. 14.

  Exposure of sensitive information through data queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User

  CWE-202
• 높음CVE-2026-16520CVSS 점수 8.72026. 8. 21.

  Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V

  CWE-20CWE-202
• 높음CVE-2026-25703CVSS 점수 7.32026. 8. 5.

  NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data containing sensitive information.

  CWE-202CWE-306CWE-524
• 높음CVE-2026-70473CVSS 점수 8.52026. 8. 4.

  Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to 3.1.3, Flowise GET /api/v1/upsert-history returns the entire server-wide upsert history instead of being scoped to the requesting user, tenant, or work

  CWE-200CWE-202CWE-862flowiseai flowise
• 중간CVE-2026-42797CVSS 점수 4.92026. 5. 25.

  Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. An administrator with adequate entitlements for Derived Schemas can create a malicious JEXL expression which allows any administrator with sufficient entitlements for User

  CWE-202apache syncope
• 높음CVE-2026-40245CVSS 점수 7.52026. 4. 16.

  Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. Versions 4.2.1 and below contain an information disclosure vulnerability in the UDR (Unified Data Repository) service. The handler for GET /nudr-dr/v2/application-

  CWE-200CWE-202CWE-209free5gc free5gc
• 높음CVE-2026-30778CVSS 점수 7.52026. 4. 15.

  The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recommended to upgrade to version 10.4.0, which fixes the issue.

  CWE-202apache skywalking
• 높음CVE-2026-33530CVSS 점수 7.72026. 3. 26.

  InvenTree is an Open Source Inventory Management System. Prior to version 1.2.6, certain API endpoints associated with bulk data operations can be hijacked to exfiltrate sensitive information from the database. The bulk operation API endpoints (e.g. `/api/part

  CWE-202inventree_project inventree
• 중간CVE-2026-3546CVSS 점수 5.32026. 3. 21.

  The e-shot form builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.2. The eshot_form_builder_get_account_data() function is registered as a wp_ajax_ AJAX handler accessible to all authenticate

  CWE-202