Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-68959
Alta · 8.5
CWE-25 25/08/2026
SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this…
SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726.
CVE-2026-23877
Média · 4.3
CWE-25 19/01/2026
Directory Traversal & Filesystem can be accessed by a non-admin user
Swing Music is a self-hosted music player for local audio files. Prior to version 2.1.4, Swing Music's `list_folders()` function in the `/folder/dir-browser` endpoint is vulnerable to directory traversal attacks. Any authenticated user (including non-admin) can browse arbitrary directories on the server filesystem. Version 2.1.4 fixes the issue.
CVE-2025-58286
Média · 5.5
CWE-25 11/10/2025
Denial of service (DoS) vulnerability in the office service. Successful exploitation of…
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.