Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.
Menü

Filtreler

2.084 açık

  1. 5,3Orta CVE-2026-87097Yama var Sensitive information disclosure due to insufficiently protected credentials. Acronis Cyber Protect 17CWE-5223 sa önce
  2. 6,8Orta CVE-2026-86383 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through… Dell PowerProtect Data DomainCWE-224 sa önce
  3. 4,3Orta CVE-2026-86386 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versio… Dell PowerProtect Data Domain Management CenterCWE-894 sa önce
  4. 5,3Orta CVE-2026-86388 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 throug… Dell PowerProtect Data DomainCWE-224 sa önce
  5. 5,3Orta CVE-2026-92665 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 throug… Dell PowerProtect Data DomainCWE-7704 sa önce
  6. 6,5Orta CVE-2026-105457Yama var Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS HAVELSAN Inc. Liman MYSCWE-224 sa önce
  7. 6,5Orta CVE-2026-86390 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 throug… Dell PowerProtect Data DomainCWE-8624 sa önce
  8. 6,4Orta CVE-2026-86391 Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versio… Dell PowerProtect Data Domain Management CenterCWE-2904 sa önce
  9. 4,9Orta CVE-2026-86392 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 throug… Dell PowerProtect Data DomainCWE-1224 sa önce
  10. 5,4Orta CVE-2026-16020 Stored XSS Fazile BACAK's DefterAsist Financial Advisor Platform Fazile BACAK DefterAsist Financial Advisor PlatformCWE-795 sa önce
  11. 6,7Orta CVE-2026-90720 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 throug… Dell PowerProtect Data DomainCWE-3545 sa önce
  12. 5,4Orta CVE-2026-118435 Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation. Samsung Open Source escargotCWE-7876 sa önce
  13. 4,3Orta CVE-2026-85655 Enable Media Replace <= 4.2.2 - Missing Authorization to Authenticated (Author+) Post Content Modification via Media Replacement Workflow shortpixel Enable Media ReplaceCWE-8626 sa önce
  14. 6,1Orta CVE-2026-101935 Echo Knowledge Base <= 17.214.0 - Reflected Cross-Site Scripting via 'new_kb_config' Parameter echoplugins Echo Knowledge Base – Documentation, FAQs, Chat & Smart SearchCWE-796 sa önce
  15. 6,4Orta CVE-2026-109975 Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute cozythemes Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & InboxCWE-797 sa önce
  16. 6,5Orta CVE-2026-76005 WP Inventory Manager <= 2.5.5 - Authenticated (Contributor+) SQL Injection via 'sort_order' Shortcode Attribute chuck1982 WP Inventory ManagerCWE-897 sa önce
  17. 4,9Orta CVE-2026-118169 Hustle <= 7.8.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'cta_label' Parameter wpmudev Hustle – Email Marketing, Lead Generation, Optins, PopupsCWE-797 sa önce
  18. 4,9Orta CVE-2026-104743 Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment TainacanCWE-227 sa önce
  19. 6,3Orta CVE-2026-76780 BeyondSEO <= 1.3.6 - Missing Authorization to Authenticated (Contributor+) Limited Privilege Escalation rankingcoach BeyondSEO – AI SEO to Improve Rankings, Listings & Online VisibilityCWE-2697 sa önce
  20. 5,9Orta CVE-2026-110185 Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthen… bitpressadmin Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and MoreCWE-987 sa önce
  21. 6,5Orta CVE-2026-116750 VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute e4jvikwp VikRentCar Car Rental Management SystemCWE-897 sa önce
  22. 6,4Orta CVE-2026-109370 Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute bplugins Document Embedder – let visitors read files without downloadingCWE-797 sa önce
  23. 6,4Orta CVE-2026-77871 Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes saadiqbal Post Snippets – Custom WordPress Code Snippets CustomizerCWE-797 sa önce
  24. 6,4Orta CVE-2026-107710 Hustle <= 7.8.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Module Content Title wpmudev Hustle – Email Marketing, Lead Generation, Optins, PopupsCWE-797 sa önce
  25. 5,3Orta CVE-2026-2839 Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints hwk-fr Advanced Custom Fields: ExtendedCWE-8627 sa önce