최근 6개월의 모든 CVE를 매일 업데이트합니다.

7개 중 7개 표시

• 중간CVE-2026-92949CVSS 점수 4.02026. 9. 17.

  vm2 versions from 3.9.6 before 3.11.7 fail to properly restrict access to accessor properties on frozen objects, allowing sandboxed scripts to bypass vm.freeze() and vm.readonly() protections. Attackers can use Object.getOwnPropertyDescriptor() or __lookupSett

  CWE-471
• 중간CVE-2026-84664CVSS 점수 5.42026. 9. 2.

  Jenkins GitLab Plugin 1.9.16 and earlier allows overwriting the global GitLab connection configuration through Stapler data binding, allowing attackers to connect to an attacker-specified URL using GitLab API tokens already configured by administrators.

  CWE-471CWE-494
• 낮음CVE-2026-59299CVSS 점수 3.12026. 8. 27.

  Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier

  CWE-471vmware spring_cloud_function
• 치명CVE-2026-50481CVSS 점수 9.92026. 8. 7.

  Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

  CWE-471microsoft azure_active_directory
• 중간CVE-2026-54267CVSS 점수 6.12026. 6. 22.

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.1, 21.2.17, and 20.3.25, to optimize client-side bootstrap in Server-Side Rendered (SSR) environments, Angular sup

  CWE-79CWE-471angular angular
• 높음CVE-2026-44798CVSS 점수 7.12026. 5. 28.

  Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, a user with access to add/change a GitRepository record could use the REST API to directly set the current_head field on the record, which was not intended to be

  CWE-471CWE-749networktocode nautobot
• 낮음CVE-2026-8492CVSS 점수 2.72026. 5. 19.

  Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5.

  CWE-471gtranslate gtranslate