🧰

開発者ツール

slug: developer-tooling

🛡 関連する脆弱性 35

ID	タイトル	重要度	検知
CVE-2026-77805	In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the...	High	1週間前
CVE-2026-104851	fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution	High	2週間前
CVE-2026-86540	knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json	High	1ヶ月前
CVE-2026-78677	GitPython: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination	High	1ヶ月前
CVE-2026-78209	exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at...	High	1ヶ月前
CVE-2026-78136	chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in...	High	1ヶ月前
CVE-2026-62960	Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches transport_get_remote_bundle_uri(), fetch_bundle_uri_interna...	High	1ヶ月前
CVE-2026-73226	electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions t...	High	2ヶ月前
CVE-2026-73224	electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user do...	High	2ヶ月前
CVE-2026-73222	Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)	High	2ヶ月前
CVE-2026-48120	Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, `autorestore.kak` script can be exploited by malicious backup files leading to arbitrary kakoune and shell comma...	High	2ヶ月前
CVE-2026-66036	FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability...	High	2ヶ月前
CVE-2026-58049	FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes...	High	3ヶ月前
CVE-2026-47964	DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow...	High	4ヶ月前
CVE-2026-47908	Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer...	High	4ヶ月前
CVE-2026-49367	In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account	High	4ヶ月前
CVE-2026-49366	In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion	High	4ヶ月前
CVE-2026-42302	openai-sdk の脆弱性 (CVE-2026-42302)	Critical	5ヶ月前
CVE-2026-41588	timing-attack の脆弱性 (CVE-2026-41588)	Critical	5ヶ月前
CVE-2026-41507	remote にコードインジェクション (CVE-2026-41507)	Critical	5ヶ月前
CVE-2026-43944	electerm の脆弱性 (CVE-2026-43944)	Critical	5ヶ月前
CVE-2026-41500	electerm-project にコマンドインジェクション (CVE-2026-41500)	Critical	5ヶ月前
CVE-2025-63704	prototype-pollution の脆弱性 (CVE-2025-63704)	Critical	5ヶ月前
CVE-2025-63706	npm にコードインジェクション (CVE-2025-63706)	Critical	5ヶ月前
CVE-2026-42503	gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host (e.g. :8080), or -port is used, gopls...	High	5ヶ月前
CVE-2026-34084	phpoffice/phpspreadsheet に安全でないデシリアライゼーション (CVE-2026-34084)	Critical	5ヶ月前
CVE-2026-38431	frappe にコードインジェクション (CVE-2026-38431)	Critical	5ヶ月前
CVE-2026-26956	vm2-project の脆弱性 (CVE-2026-26956)	Critical	5ヶ月前
CVE-2026-24781	vm2-project にコードインジェクション (CVE-2026-24781)	Critical	5ヶ月前
CVE-2026-24118	vm2-project にコードインジェクション (CVE-2026-24118)	Critical	5ヶ月前