최근 6개월의 모든 CVE를 매일 업데이트합니다.

9개 중 9개 표시

• 낮음CVE-2026-90842CVSS 점수 3.72026. 9. 15.

  A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the file application/models/admin/Login_Model.php. This manipulation of the argument password/email/currentpassword/dbcurren

  CWE-312CWE-313
• 중간CVE-2026-14663CVSS 점수 6.52026. 8. 13.

  Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted da

  CWE-313CWE-345postgresql postgresql
• 중간CVE-2026-8804CVSS 점수 6.72026. 7. 3.

  Puppet resource_api (shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x) does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transact

  CWE-312CWE-313
• 높음CVE-2026-52783CVSS 점수 8.22026. 6. 26.

  OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, OpenProject's Storages module writes the OneDrive/SharePoint userless OAuth access_token plaintext to Rails.cache under the deterministic key storage.<id>.httpx_acce

  CWE-313
• 높음CVE-2026-24349CVSS 점수 7.12026. 6. 9.

  A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions), SIMATIC W

  CWE-313siemens simatic_wincc_unified_pc_runtime
• 중간CVE-2025-4397CVSS 점수 6.82026. 5. 7.

  Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data.

  CWE-313
• 중간CVE-2026-6796CVSS 점수 4.32026. 4. 21.

  A vulnerability was determined in Sanluan PublicCMS up to 6.202506.d. Affected is the function log_login of the file core/src/main/java/com/publiccms/controller/admin/LoginAdminController.java of the component Failed Login Handler. This manipulation of the arg

  CWE-312CWE-313
• 중간CVE-2026-6598CVSS 점수 4.32026. 4. 20.

  A security vulnerability has been detected in langflow-ai langflow up to 1.8.3. The affected element is the function create_project/encrypt_auth_settings of the file src/backend/base/Langflow/api/v1/projects.py of the component Project Creation Endpoint. Such

  CWE-312CWE-313
• 중간CVE-2026-5531CVSS 점수 5.32026. 4. 5.

  A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /login_credentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on dis

  CWE-312CWE-313