Alle CVE’s van de afgelopen zes maanden, dagelijks bijgewerkt.

6 van 6 getoond

• GemiddeldCVE-2026-20282CVSS-score 4.916 sep 2026

  A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit t

  CWE-641
• HoogCVE-2026-46581CVSS-score 7.55 aug 2026

  In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing an attacker to specify a URL to a remote Facelet which will be included and processed as part of the normal requ

  CWE-22CWE-94CWE-641eclipse mojarra
• HoogCVE-2026-50510CVSS-score 7.814 jul 2026

  Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.

  CWE-641microsoft github_copilot
• HoogCVE-2026-50023CVSS-score 8.323 jun 2026

  yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files (such as .desktop, .url, .webloc) to the user's filesystem, bypassing the remediation for

  CWE-641yt-dlp_project yt-dlp
• HoogCVE-2026-27140CVSS-score 8.88 apr 2026

  SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

  CWE-863CWE-641golang go
• GemiddeldCVE-2019-25623CVSS-score 6.223 mrt 2026

  Luminance Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface. Attackers can create a text file with arbitrary character sequences and trigger t

  CWE-641pixarra luminance_studio