Все CVE за последние шесть месяцев, обновляются ежедневно.

Показано 5 из 5

• ВысокийCVE-2026-66152Оценка CVSS 8.825 авг. 2026 г.

  A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root.

  CWE-29
• СреднийCVE-2026-10732Оценка CVSS 6.45 июн. 2026 г.

  All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when extracting a ZIP archive containing two entries with the same path - the first being a symlink to an arbitrary target and the second being a re

  CWE-29CWE-22
• ВысокийCVE-2026-24217Оценка CVSS 8.820 мая 2026 г.

  NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering

  CWE-29nvidia bionemo_frameworklinux linux_kernel
• ВысокийCVE-2026-5627Оценка CVSS 7.27 апр. 2026 г.

  A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the `AgentFlows` component. The vulnerability arises from improper handling of user input in the `loadFlow` and `deleteFlow` methods in `server/utils

  CWE-29mintplexlabs anythingllm
• КритическийCVE-2025-15036Оценка CVSS 10.030 мар. 2026 г.

  A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present in versions before v3.7.0, arises due to the lack of validat

  CWE-29CWE-22lfprojects mlflow