Vulnerabilidades em jahlives

66 resultados
Análise Vexday

Jahlives apresenta um panorama de risco acelerado: 30 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, incluindo 16 críticas. Não há evidência de exploração ativa documentada (KEV = 0), mas o volume recente e a prevalência de falhas de autenticação (CWE-345) exigem atenção imediata. O perfil sugere questões estruturais na segurança do desenvolvimento.

CVE-2026-74899CRITICALopenssl_encrypt before 1.4.0 Sandbox Escape via Type HierarchyEPSS 0.8%CVE-2026-74878CRITICALopenssl_encrypt before 1.4.0 TOTP Rate Limiter BypassEPSS 0.7%CVE-2026-81690HIGHverify-usb before 1.4.9 Symlink Directory Traversal Code ExecutionEPSS 0.7%CVE-2026-74886CRITICALopenssl_encrypt before 1.4.0 Plugin Import Guard BypassEPSS 0.7%CVE-2026-74872CRITICALopenssl_encrypt before 1.4.0 Arbitrary Code Execution via WhirlpoolEPSS 0.7%CVE-2026-74895CRITICALopenssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process IsolationEPSS 0.7%CVE-2026-74894CRITICALopenssl_encrypt before 1.4.0 Authentication Bypass via Bearer TokenEPSS 0.7%CVE-2026-81707CRITICALopenssl_encrypt before 1.4.9 ANSI Escape Injection via Identity EmailEPSS 0.6%CVE-2026-81721HIGHopenssl_encrypt before 1.4.9 Denial of Service via KDFEPSS 0.6%CVE-2026-74880CRITICALopenssl_encrypt before 1.4.0 Token Leakage via Query ParametersEPSS 0.6%CVE-2026-74896CRITICALopenssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute TraversalEPSS 0.6%CVE-2026-74900CRITICALopenssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation ModeEPSS 0.6%CVE-2026-74891HIGHopenssl_encrypt before 1.4.0 Hardcoded Database CredentialsEPSS 0.5%CVE-2026-74892HIGHopenssl_encrypt before 1.4.0 Hardcoded Secret KeyEPSS 0.5%CVE-2026-81699HIGHopenssl_encrypt before 1.4.9 Denial of Service via unbounded KDF costEPSS 0.5%CVE-2026-81693HIGHopenssl_encrypt before 1.4.9 Denial of Service via QR total fieldEPSS 0.5%CVE-2026-81692HIGHopenssl_encrypt before 1.4.9 Denial of Service via STREAMINFOEPSS 0.5%CVE-2026-74883HIGHopenssl_encrypt before 1.4.0 Sandbox Bypass via pathlib and ioEPSS 0.5%CVE-2026-74877HIGHopenssl_encrypt before 1.4.0 Missing Ownership Verification via revoke_keyEPSS 0.5%CVE-2026-74893HIGHopenssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded SecretsEPSS 0.4%