搜尋
45 筆結果- CRITICAL9.6CVE-2026-45321⚠ KEVEPSS 17.1%Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
- CRITICAL9.8CVE-2026-42208⚠ KEVEPSS 56.9%LiteLLM has SQL Injection in Proxy API key verification
- CRITICAL9.8CVE-2026-39987⚠ KEVEPSS 80.7%Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
- —CVE-2026-33634⚠ KEVEPSS 23.9%Trivy ecosystem supply chain was briefly compromised
- CRITICAL9.8CVE-2026-33017⚠ KEVEPSS 24.0%Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint
- CRITICAL9.9CVE-2025-68613⚠ KEVEPSS 65.8%n8n Vulnerable to Remote Code Execution via Expression Injection
- HIGH8.8CVE-2025-34291⚠ KEVEPSS 32.7%Langflow CORS misconfiguration enables Account Takeover and RCE
- CRITICAL10.0CVE-2025-55182⚠ KEVEPSS 84.5%React Server Components are Vulnerable to RCE
- CRITICAL9.8CVE-2025-11953⚠ KEVEPSS 27.9%@react-native-community/cli has arbitrary OS command injection
- HIGH7.5CVE-2025-54313⚠ KEVEPSS 14.7%eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code
- HIGH8.0CVE-2025-48384⚠ KEVEPSS 0.60%Git allows arbitrary code execution through broken config quoting
- CRITICAL9.8CVE-2025-3248⚠ KEVEPSS 92.7%Langflow Unauth RCE
- MEDIUM5.3CVE-2025-31125⚠ KEVEPSS 83.2%Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
- HIGH8.1CVE-2025-27363⚠ KEVEPSS 70.8%freetype - security update
- CRITICAL9.1CVE-2024-38475⚠ KEVEPSS 93.9%Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
- MEDIUM5.3CVE-2023-44487⚠ KEVEPSS 94.4%github.com/nghttp2/nghttp2 has HTTP/2 Rapid Reset
- HIGH8.8CVE-2023-5217⚠ KEVEPSS 5.0%Electron affected by libvpx's heap buffer overflow in vp8 encoding
- HIGH8.8CVE-2023-4863⚠ KEVEPSS 93.3%libwebp: OOB write in BuildHuffmanTable
- HIGH8.9CVE-2023-27524⚠ KEVEPSS 84.0%Apache superset missing check for default SECRET_KEY
- CRITICAL9.6CVE-2022-4135⚠ KEVEPSS 0.08%Heap buffer overflow in GPU
- HIGH8.8CVE-2022-33891⚠ KEVEPSS 93.5%Apache Spark UI can allow impersonation if ACLs enabled
- CRITICAL9.8CVE-2020-16846⚠ KEVEPSS 94.4%salt - security update
- CRITICAL9.8CVE-2020-11651⚠ KEVEPSS 94.2%salt - security update
- MEDIUM6.5CVE-2020-11652⚠ KEVEPSS 93.7%SaltStack Salt is vulnerable Arbitrary Directory Access
- CRITICAL9.8CVE-2021-42013⚠ KEVEPSS 94.4%Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
第 1 / 2 頁下一頁 →