Security News

주요 제품 취약점 (6건)

기술CVE심각도유형KEV등재일
MySQL/MariaDB CyberPersons CyberPanel
upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute …
CVE-2024-51567 10.0 CWE-306 KEV 2024-11-07
PostgreSQL Splunk Enterprise
In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files throug…
CVE-2026-20253 9.8 CWE-306 KEV 2026-06-18
MySQL/MariaDB Progress MOVEit Transfer
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL injection…
CVE-2023-34362 9.8 CWE-89 KEV 2023-06-02
Spring Framework VMware Spring Framework
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit …
CVE-2022-22965 9.8 CWE-94 KEV 2022-04-04
Apache Spark
The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks …
CVE-2022-33891 8.8 CWE-78 KEV 2023-03-07
PostgreSQL Sangoma Switchvox
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning…
CVE-2026-9586 — CWE-89 KEV 2026-09-02