Alle CVE’s van de afgelopen zes maanden, dagelijks bijgewerkt.

4 van 4 getoond

• HoogCVE-2026-92950CVSS-score 8.617 sep 2026

  vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process. Attackers can supply a malicious script file to the vm2 CLI that uses require(__filename) to re-execute itsel

  CWE-453
• GemiddeldCVE-2026-19212CVSS-score 4.37 aug 2026

  A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WTSTradeDef.hpp of the component TraderATP Cash Trade Conversion. Executing a manipulation of the argument m_offsetType can lead to use of uni

  CWE-453CWE-457
• HoogCVE-2026-0082CVSS-score 7.817 jun 2026

  In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interactio

  CWE-453google android
• GemiddeldCVE-2026-41330CVSS-score 4.421 apr 2026

  OpenClaw before 2026.3.31 contains an environment variable override vulnerability in host exec policy that fails to properly enforce proxy, TLS, Docker, and Git TLS controls. Attackers can bypass security controls by overriding environment variables to circumv

  CWE-453openclaw openclaw