Все уязвимости

Microsoft PowerToys Elevation of Privilege Vulnerability

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Windows Update Stack Tampering Vulnerability

SSL bundle configuration silently bypassed in Spring Cloud Gateway

Local privilege escalation due to improper handling of environment variables. The following products

Cortex XDR Agent: Local Administrator can disable the agent on Windows

n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation

Post auth nginx configuration injection in Danfoss AK-SM8xxA Series

Inadequate Steps to Confirm Vulnerability in QuRouter

OpenAI Codex Desktop for Windows and macOS automatically inspected Git metadata and working-tree sta

In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its comple

MariaDB: environment injection via wsrep bootstrap in the mariadb.service file

A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorizati

Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig

Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection

MergeAccount PHP object injection via session-key substitution

NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI

Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permi

Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop

Ouroboros: Untrusted project .env can still reach RCE via omitted execution-routing keys (Incomplete fix of CVE-2026-47211)

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically

Netavark: podman: netavark may resolve hostnames to unexpected hosts

IBM Db2 Mirror for i is affected by multiple vulnerabilities

In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control integra

FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup

Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false

HCL iControl is affected by multiple security vulnerabilities.

Dash: Users can write to config despire permissions (OIDC tested)

Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution