최근 6개월의 모든 CVE를 매일 업데이트합니다.

5개 중 5개 표시

• 중간CVE-2026-11537CVSS 점수 4.32026. 9. 18.

  IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.

  CWE-650
• 중간CVE-2026-16435CVSS 점수 5.92026. 9. 14.

  IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features.

  CWE-650
• 중간CVE-2026-15753CVSS 점수 5.42026. 7. 14.

  A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this vulnerability is an unknown functionality of the file /api/v1/payment/withdraw/review?action=approve. Executing a manipulation can lead to trusting http permission meth

  CWE-650
• 중간CVE-2026-42543CVSS 점수 4.32026. 6. 4.

  IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 are vulnerable to a cross-site request forgery attack, because they use the HTTP method `GET` to change state on the ser

  CWE-650
• 높음CVE-2026-44548CVSS 점수 8.12026. 5. 12.

  ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level cross-site GET navigation from an attacker-controlled page to FundRaiserDelete.php, PropertyTypeDelete.php, or NoteDelete.php causes a logged-in ChurchCRM user with the relevant ro

  CWE-352CWE-650