최근 6개월의 모든 CVE를 매일 업데이트합니다.

5개 중 5개 표시

• 높음CVE-2026-66152CVSS 점수 8.82026. 8. 25.

  A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root.

  CWE-29
• 중간CVE-2026-10732CVSS 점수 6.42026. 6. 5.

  All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when extracting a ZIP archive containing two entries with the same path - the first being a symlink to an arbitrary target and the second being a re

  CWE-29CWE-22
• 높음CVE-2026-24217CVSS 점수 8.82026. 5. 20.

  NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering

  CWE-29nvidia bionemo_frameworklinux linux_kernel
• 높음CVE-2026-5627CVSS 점수 7.22026. 4. 7.

  A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the `AgentFlows` component. The vulnerability arises from improper handling of user input in the `loadFlow` and `deleteFlow` methods in `server/utils

  CWE-29mintplexlabs anythingllm
• 치명CVE-2025-15036CVSS 점수 10.02026. 3. 30.

  A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present in versions before v3.7.0, arises due to the lack of validat

  CWE-29CWE-22lfprojects mlflow