최근 6개월의 모든 CVE를 매일 업데이트합니다.

4개 중 4개 표시

• 높음CVE-2026-92950CVSS 점수 8.62026. 9. 17.

  vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attackers can supply a malicious script file to the vm2 CLI that uses require(__filename) to re-execute itsel

  CWE-453
• 중간CVE-2026-19212CVSS 점수 4.32026. 8. 7.

  A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WTSTradeDef.hpp of the component TraderATP Cash Trade Conversion. Executing a manipulation of the argument m_offsetType can lead to use of uni

  CWE-453CWE-457
• 높음CVE-2026-0082CVSS 점수 7.82026. 6. 17.

  In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interactio

  CWE-453google android
• 중간CVE-2026-41330CVSS 점수 4.42026. 4. 21.

  OpenClaw before 2026.3.31 contains an environment variable override vulnerability in host exec policy that fails to properly enforce proxy, TLS, Docker, and Git TLS controls. Attackers can bypass security controls by overriding environment variables to circumv

  CWE-453openclaw openclaw