Alle CVE’s van de afgelopen zes maanden, dagelijks bijgewerkt.
Gepubliceerde kwetsbaarheden rechtstreeks uit de National Vulnerability Database, met ernst, CWE-klasse en getroffen producten. Zoek, filter en zie wat er vandaag bij kwam.
- 519 in de afgelopen 24 uur
- 2.515 in de afgelopen 7 dagen
- 59.240 in de afgelopen zes maanden
Bron: NVD (National Vulnerability Database) · Bijgewerkt op 25 sep 2026
4 van 4 getoond
An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.
CWE-1270tenable security_centerGitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to bypass administrator-configured tool governance policies due to improper
CWE-1270gitlab gitlabPterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the Wings /upload/file endpoint accepted any valid panel-signed JWT that contained server_uuid, user_uuid, and unique_id claims without che
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privil
CWE-1270dell powerprotect_data_manager
Vind de bug voordat een aanvaller dat doet.
Log in met GitHub en start je eerste audit binnen een minuut. Voor het gratis abonnement is geen creditcard nodig.