Все CVE за последние шесть месяцев, обновляются ежедневно.

Показано 5 из 5

• ВысокийCVE-2026-47162Оценка CVSS 8.811 июн. 2026 г.

  Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths t

  CWE-74CWE-94CWE-140vim vim
• ВысокийCVE-2026-6322Оценка CVSS 7.55 мая 2026 г.

  fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with

  CWE-436CWE-140openjsf fast-uri
• СреднийCVE-2026-33457Оценка CVSS 6.310 апр. 2026 г.

  Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands via a crafted service name parameter due to insufficient sanitization of the service descriptio

  CWE-140checkmk checkmk
• ВысокийCVE-2026-33456Оценка CVSS 7.610 апр. 2026 г.

  Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject arbitrary Livestatus commands via a crafted service description.

  CWE-140checkmk checkmk
• СреднийCVE-2026-33455Оценка CVSS 6.310 апр. 2026 г.

  Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insufficient input sanitization in search filter plugins.

  CWE-140checkmk checkmk