Wszystkie CVE z ostatnich sześciu miesięcy, aktualizowane codziennie.

Pokazano 4 z 4

• ŚredniCVE-2026-90813Ocena CVSS 4.314 wrz 2026

  A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order:

  CWE-179CWE-180
• WysokiCVE-2026-49414Ocena CVSS 7.827 cze 2026

  The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was

  CWE-179freebsd freebsd
• NiskiCVE-2026-3832Ocena CVSS 3.730 kwi 2026

  A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses

  CWE-179gnu gnutlsredhat hardened_imagesredhat openshift_container_platform
• ŚredniCVE-2026-32305Ocena CVSS 5.320 mar 2026

  Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea.1 are vulnerable to mTLS bypass through the TLS SNI pre-sniffing logic related to fragmented ClientHello packets. When a TLS ClientHello is

  CWE-287CWE-1188CWE-179traefik traefik