آخرین آسیب‌پذیری‌ها

Microsoft Defender Elevation of Privilege Vulnerability

Windows Shell Spoofing Vulnerability

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all ve…

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via <in…

Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

TrueConf Client Update Integrity Verification Bypass

Trivy ecosystem supply chain briefly compromised

Insufficient input validation leading to memory overread

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Lantronix EDS5000, G520, and X300 OS Command Injection

Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

Integer Overflow or Wraparound in Graphics

VMware Aria Operations command injection vulnerability

Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restriction…