최근 6개월의 모든 CVE를 매일 업데이트합니다.

17개 중 17개 표시

• 높음CVE-2026-92708CVSS 점수 7.52026. 9. 18.

  Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. In versions 5.1.0 through 5.9.2, stringify and uneval functions serialize a typed array by emitting its entire backing ArrayBuffer rath

  CWE-200CWE-226
• 중간CVE-2026-18023CVSS 점수 5.72026. 9. 8.

  Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a crafted IOCTL request that bypasses the driver's security verification mechanism. Refe

  CWE-226
• 높음CVE-2026-74791CVSS 점수 8.62026. 8. 16.

  Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers can exploit request-dependent ITemplateLoader implementations to access previously

  CWE-226
• 중간CVE-2026-74250CVSS 점수 6.32026. 8. 14.

  In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.

  CWE-226
• 높음CVE-2026-47247CVSS 점수 7.52026. 7. 21.

  libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images. An attacker who uploads a crafted AVIF/HEIC file to any server-side image

  CWE-200CWE-226CWE-682struktur libheif
• 높음CVE-2026-13585CVSS 점수 8.22026. 7. 15.

  Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive information via crafted

  CWE-226CWE-770
• 중간CVE-2026-48984CVSS 점수 4.72026. 6. 18.

  pam_usb provides hardware authentication for Linux using ordinary removable media. In versions 0.9.1 and below, the xfree() memory release helper in calls free() without first zeroing the buffer contents, releasing heap-allocated buffers containing sensitive d

  CWE-14CWE-226
• 중간CVE-2026-32960CVSS 점수 6.52026. 4. 20.

  SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a sensitive information in resource not removed before reuse. An attacker may login to the device without knowing the password by sending a crafted packet.

  CWE-226silextechnology sd-330ac_firmwaresilextechnology sd-330acsilextechnology amc_manager
• 높음CVE-2026-5795CVSS 점수 7.42026. 4. 8.

  In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are conditions that cause an early return from the JASPIAuthenticator code without clearing th

  CWE-226CWE-287eclipse jetty
• 중간CVE-2025-14858CVSS 점수 5.12026. 4. 7.

  The Semtech LR11xx LoRa transceivers running early versions of firmware contains an information disclosure vulnerability in its firmware validation functionality. When a host issues a firmware validity check command via the SPI interface, the device decrypts t

  CWE-226
• 중간CVE-2019-25657CVSS 점수 5.52026. 4. 5.

  AnyBurn 4.3 x86 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the image conversion function. Attackers can paste a large buffer into the source or destination image fi

  CWE-226anyburn anyburn
• 중간CVE-2019-25645CVSS 점수 6.22026. 3. 24.

  WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by processing malformed AVI files. Attackers can create a specially crafted AVI file with an oversized buffer and load it th

  CWE-226
• 중간CVE-2019-25617CVSS 점수 6.22026. 3. 22.

  Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function that allows local attackers to crash the application by processing malformed MP4 files. Attackers can create a crafted MP4 file containing an oversized buffer and

  CWE-226
• 중간CVE-2019-25571CVSS 점수 6.22026. 3. 21.

  MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to crash the application by opening a specially crafted MP3 file containing an excessively long URL string. Attackers can create a malicious MP3 file with a buffer contai

  CWE-226ventismedia mediamonkey
• 중간CVE-2019-25563CVSS 점수 6.22026. 3. 21.

  PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying a malformed image file. Attackers can trigger the vulnerability through the Create SC feature by selecting a crafted BMP file with

  CWE-226uvnc pchelpwarev2
• 높음CVE-2019-25560CVSS 점수 7.52026. 3. 21.

  Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash the application by processing malformed MP3 files. Attackers can create a crafted MP3 file with an oversized buffer and trigger the crash by opening the file thro

  CWE-226lyricvideocreator lyric_video_creator
• 중간CVE-2019-25553CVSS 점수 6.22026. 3. 21.

  CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers to crash the application by importing a specially crafted image file. Attackers can create a malformed JPG file with an oversized buffer and trigger the crash thro

  CWE-226cewe photo_importer