CWE-454 · 4 kayıt
External Initialization of Trusted Variables or Data Stores
Bu sınıftaki CVE’ler
4 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2026-54003İstismar yok | Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` headergetkirby · kirby · CWE-454 | Kritik9,1 | — | %0,7 | 9 Tem 2026 |
32İzleyin | CVE-2026-26148İstismar yok | Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerabilitymicrosoft · azure ad ssh login extension for linux · CWE-454 | Yüksek8,1 | — | %0,3 | 10 Mar 2026 |
25İzleyin | CVE-2026-48980İstismar yok | pam_usb: getenv() used in PAM context allows environment variable injection into local-check logicmcdope · pam_usb · CWE-454 | Orta6,3 | — | %0,2 | 18 Haz 2026 |
22İzleyin | CVE-2025-36244İstismar yok | IBM AIX privilege escalationibm · vios · CWE-454 | Orta5,5 | — | %0,1 | 16 Eyl 2025 |
- CVE-2026-5400336İzleyin
Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header
KritikCVSS 9,1İstismar yokEPSS %1getkirby · kirby9 Tem 2026
- CVE-2026-2614832İzleyin
Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability
YüksekCVSS 8,1İstismar yokEPSS %0microsoft · azure ad ssh login extension for linux10 Mar 2026
- CVE-2026-4898025İzleyin
pam_usb: getenv() used in PAM context allows environment variable injection into local-check logic
OrtaCVSS 6,3İstismar yokEPSS %0mcdope · pam_usb18 Haz 2026
- CVE-2025-3624422İzleyin
IBM AIX privilege escalation
OrtaCVSS 5,5İstismar yokEPSS %0ibm · vios16 Eyl 2025