Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.

Filtreler

2.084 açık

  1. 6,5Orta CVE-2026-50541Yama var Xibo: IDOR (Broken Object-Level Authorization) on GET /dataset/export/csv/{id} Allows Arbitrary Dataset Export xibosignage xibo-cmsCWE-86221 dk önce
  2. 4,8Orta CVE-2026-59959Yama var SAIL: WebP decoder division by zero through malformed animated canvas metadata HappySeaFox sailCWE-36929 dk önce
  3. 5,5Orta CVE-2026-93516Yama var .Org Server XInput Passive Grab Use-After-Free x.org xwaylandX.org xorg-x11-serverCWE-41642 dk önce
  4. 6,5Orta CVE-2026-116404 WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability David Anderson Redux FrameworkCWE-86246 dk önce
  5. 6,5Orta CVE-2026-115957Yama var WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability WP Discussion BoardCWE-7946 dk önce
  6. 6,5Orta CVE-2026-55369 Waline login accepts a non-string email as a match-all MongoDB query walinejs walineCWE-28750 dk önce
  7. 6,8Orta CVE-2026-93515Yama var .Org Server Present Extension Use-After-Free x.org xwaylandX.org xorg-x11-serverCWE-4161 sa önce
  8. 4,2Orta CVE-2026-67077 HCL BigFix AEX is affected by multiple security vulnerabilities. HCL Software BigFix AEXCWE-4411 sa önce
  9. 6,4Orta CVE-2026-67079 HCL BigFix AEX is affected by multiple security vulnerabilities. HCL Software BigFix AEXCWE-10211 sa önce
  10. 6,5Orta CVE-2026-67080 HCL BigFix AEX is affected by multiple security vulnerabilities. HCL Software BigFix AEXCWE-2091 sa önce
  11. 4,2Orta CVE-2026-81472 Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module… Dell iDRAC Service Module for ESXiDell iDRAC Service Module for LinuxCWE-941 sa önce
  12. 5,3Orta CVE-2026-102799 Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16 icagenda.com iCagenda extension for JoomlaCWE-12361 sa önce
  13. 5,4Orta CVE-2026-116855Yama var WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability wphocus My auctions allegroCWE-8622 sa önce
  14. 4,9Orta CVE-2026-115223Yama var Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text Block Smart Popup by SupsysticCWE-13363 sa önce
  15. 5,3Orta CVE-2026-110508Yama var Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification Essential Addons for ElementorCWE-8623 sa önce
  16. 5,3Orta CVE-2026-106648Yama var Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID Shortcodes Royal Elementor AddonsCWE-743 sa önce
  17. 5,3Orta CVE-2026-103330 Sadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature Bypass Sadad QA PaymentCWE-3453 sa önce
  18. 5,3Orta CVE-2026-103313 BitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return Handler BitPay Gateway for WooCommerceCWE-3453 sa önce
  19. 6,9Orta CVE-2026-101274Yama var When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did no… pretix3 sa önce
  20. 5,3Orta CVE-2026-101273Yama var Giftcard enumeration pretix3 sa önce
  21. 5,9Orta CVE-2026-87879Yama var Sensitive information disclosure due to improper token validation. Acronis Cyber Protect 17CWE-3473 sa önce
  22. 6,3Orta CVE-2026-87878Yama var Linux binaries have executable stack attribute enabled. Acronis Cyber Protect 17CWE-6933 sa önce
  23. 5,7Orta CVE-2026-87099Yama var Cross-site scripting (XSS) vulnerability due to improper input validation. Acronis Cyber Protect 17CWE-793 sa önce
  24. 6,8Orta CVE-2026-87880Yama var Sensitive information disclosure due to missing SSL certificate verification affecting one component. Acronis Cyber Protect 17CWE-2953 sa önce
  25. 6,2Orta CVE-2026-87101Yama var Sensitive information disclosure due to improper token validation. Acronis Cyber Protect 17CWE-3473 sa önce