Все CVE за последние шесть месяцев, обновляются ежедневно.

Показано 4 из 4

• ВысокийCVE-2026-22068Оценка CVSS 8.229 июл. 2026 г.

  Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through 9.2.14. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.

  CWE-777apache traffic_server
• СреднийCVE-2026-56021Оценка CVSS 5.318 июн. 2026 г.

  Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

  CWE-185CWE-777webmin webmin
• ВысокийCVE-2026-40110Оценка CVSS 7.35 мая 2026 г.

  Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins against the allow_origin_pat configuration value. Because re.match() only anchors at the

  CWE-777CWE-625jupyter jupyter_server
• СреднийCVE-2026-39087Оценка CVSS 6.423 апр. 2026 г.

  ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.

  CWE-777CWE-94