최근 6개월의 모든 CVE를 매일 업데이트합니다.

3개 중 3개 표시

• 높음CVE-2026-76317CVSS 점수 8.82026. 8. 19.

  In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could move files that the user account running Splunk Enterprise can read into a lookup that the user controls. The user could

  CWE-26splunk splunk
• 중간CVE-2026-46747CVSS 점수 4.32026. 6. 9.

  A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not properly sanitize path input in the `GET /api/sftp/uploadFiles` endpoint used for directory listing. This allows path traversal through craft

  CWE-26siemens sinec_ins
• 치명CVE-2026-42196CVSS 점수 9.92026. 5. 12.

  django-s3file is a lightweight file upload input for Django and Amazon S3. Prior to 7.0.2, S3FileMiddleware is vulnerable to relative path traversal attacks, where an attacker can use a modified request to escape pre-signed upload locations and have the Django

  CWE-22CWE-26