İçeriğe geç
Filtreler
2.572 açık
-
8,7Yüksek
CVE-2026-116078Yama var
HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit
mtrudel banditCWE-77019 dk önce
-
7,1Yüksek
CVE-2026-52729Yama var
Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletion
xibosignage xibo-cmsCWE-86223 dk önce
-
8,5Yüksek
CVE-2026-93517Yama var
X.Org Server GLX RenderLarge Heap Buffer Overflow
x.org xwaylandx.orgg xorg-x11-serverCWE-12229 dk önce
-
8,5Yüksek
CVE-2026-59185Yama var
identrail: Cross-tenant GitHub installation binding without ownership verification
identrailCWE-63930 dk önce
-
8,3Yüksek
CVE-2026-59179Yama var
OpenHop: Path Traversal in Flow ID File Operations
naorsabag openhopCWE-2232 dk önce
-
8,8Yüksek
CVE-2026-59177Yama var
ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces
esphome device-builderCWE-132734 dk önce
-
7,8Yüksek
CVE-2026-59176Yama var
Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Import
jordanburke functypeCWE-82937 dk önce
-
7,8Yüksek
CVE-2026-59172Yama var
Joker linter executed project-local .jokerd/linter.* files during linting
candid82 jokerCWE-82938 dk önce
-
7,1Yüksek
CVE-2026-59164Yama var
NORA missing cross-user token-management authorization
getnora-io noraCWE-86240 dk önce
-
7,5Yüksek
CVE-2026-116393
WordPress Optima Express + MarketBoost IDX Plugin plugin <= 8.7.8 - Broken Access Control vulnerability
iHomefinder, Inc. Optima ExpressCWE-86245 dk önce
-
7,2Yüksek
CVE-2026-116392
WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability
PickPlugins AccordionCWE-50245 dk önce
-
8,8Yüksek
CVE-2026-116391Yama var
WordPress GS Logo Slider plugin <= 3.8.9 - PHP Object Injection vulnerability
GS Plugins GS Logo SliderCWE-50245 dk önce
-
8,5Yüksek
CVE-2026-111850Yama var
WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability
BuddyPressCWE-8945 dk önce
-
7,1Yüksek
CVE-2026-115612Yama var
WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability
iova.mihai SliceWPCWE-7946 dk önce
-
7,1Yüksek
CVE-2026-115596Yama var
WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability
impleCode eCommerce Product CatalogCWE-7946 dk önce
-
7,1Yüksek
CVE-2026-115593Yama var
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)CWE-7946 dk önce
-
7,5Yüksek
CVE-2026-115591Yama var
WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability
Contact Form by SupsysticCWE-20146 dk önce
-
7,1Yüksek
CVE-2026-115609Yama var
WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability
Stiofan GetPaidCWE-7946 dk önce
-
7,1Yüksek
CVE-2026-115606Yama var
WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
Crowd Favorite DXP ToolKitCWE-7946 dk önce
-
7,5Yüksek
CVE-2026-118037Yama var
Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing
Progress Software Telerik Document Processing LibrariesCWE-6061 sa önce
-
7,5Yüksek
CVE-2026-118036Yama var
Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering
Progress Software Telerik Document Processing LibrariesCWE-4071 sa önce
-
7,5Yüksek
CVE-2026-118035Yama var
Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing
Progress Software Telerik Document Processing LibrariesCWE-4071 sa önce
-
7,5Yüksek
CVE-2026-118040Yama var
Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing
Progress Software Telerik Document Processing LibrariesCWE-2951 sa önce
-
7,5Yüksek
CVE-2026-118039Yama var
XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing
Progress Software Telerik Document Processing LibrariesCWE-6111 sa önce
-
7,1Yüksek
CVE-2026-118038Yama var
Path Traversal in Telerik Document Processing Libraries AI Agent Tools
Progress Software Telerik Document Processing LibrariesCWE-221 sa önce