최근 6개월의 모든 CVE를 매일 업데이트합니다.

6개 중 6개 표시

• 낮음CVE-2026-61909CVSS 점수 3.52026. 9. 9.

  An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shared access to another user's calendar or address book could read even unshared events or contacts by including the targ

  CWE-420cyrus imap
• 중간CVE-2026-77639CVSS 점수 5.32026. 8. 20.

  Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely. This is TROVE-2026-022.

  CWE-420torproject tor
• 중간CVE-2026-40435CVSS 점수 5.32026. 5. 13.

  When configured, IP-based access restrictions for httpd do not cover all endpoints, which may allow connections from blocked addresses. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  CWE-420f5 big-ip_access_policy_managerf5 big-ip_advanced_firewall_managerf5 big-ip_advanced_web_application_firewall
• 중간CVE-2026-43505CVSS 점수 6.52026. 5. 1.

  An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 mishandles access control in the activation scenario, relaying of unauthenticated traffic can occur.

  CWE-420prosody prosody
• 높음CVE-2026-40217CVSS 점수 8.82026. 4. 10.

  LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

  CWE-420CWE-94litellm litellm
• 낮음CVE-2026-35388CVSS 점수 2.52026. 4. 2.

  OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

  CWE-420openbsd openssh