İçeriğe geç
Filtreler
2.084 açık
-
6,5Orta
CVE-2026-50541Yama var
Xibo: IDOR (Broken Object-Level Authorization) on GET /dataset/export/csv/{id} Allows Arbitrary Dataset Export
xibosignage xibo-cmsCWE-86221 dk önce
-
4,8Orta
CVE-2026-59959Yama var
SAIL: WebP decoder division by zero through malformed animated canvas metadata
HappySeaFox sailCWE-36929 dk önce
-
5,5Orta
CVE-2026-93516Yama var
.Org Server XInput Passive Grab Use-After-Free
x.org xwaylandX.org xorg-x11-serverCWE-41642 dk önce
-
6,5Orta
CVE-2026-116404
WordPress Redux Framework plugin <= 4.5.16 - Broken Access Control vulnerability
David Anderson Redux FrameworkCWE-86246 dk önce
-
6,5Orta
CVE-2026-115957Yama var
WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability
WP Discussion BoardCWE-7946 dk önce
-
6,5Orta
CVE-2026-55369
Waline login accepts a non-string email as a match-all MongoDB query
walinejs walineCWE-28750 dk önce
-
6,8Orta
CVE-2026-93515Yama var
.Org Server Present Extension Use-After-Free
x.org xwaylandX.org xorg-x11-serverCWE-4161 sa önce
-
4,2Orta
CVE-2026-67077
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL Software BigFix AEXCWE-4411 sa önce
-
6,4Orta
CVE-2026-67079
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL Software BigFix AEXCWE-10211 sa önce
-
6,5Orta
CVE-2026-67080
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL Software BigFix AEXCWE-2091 sa önce
-
4,2Orta
CVE-2026-81472
Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module…
Dell iDRAC Service Module for ESXiDell iDRAC Service Module for LinuxCWE-941 sa önce
-
5,3Orta
CVE-2026-102799
Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16
icagenda.com iCagenda extension for JoomlaCWE-12361 sa önce
-
5,4Orta
CVE-2026-116855Yama var
WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability
wphocus My auctions allegroCWE-8622 sa önce
-
4,9Orta
CVE-2026-115223Yama var
Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text Block
Smart Popup by SupsysticCWE-13363 sa önce
-
5,3Orta
CVE-2026-110508Yama var
Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification
Essential Addons for ElementorCWE-8623 sa önce
-
5,3Orta
CVE-2026-106648Yama var
Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID Shortcodes
Royal Elementor AddonsCWE-743 sa önce
-
5,3Orta
CVE-2026-103330
Sadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature Bypass
Sadad QA PaymentCWE-3453 sa önce
-
5,3Orta
CVE-2026-103313
BitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return Handler
BitPay Gateway for WooCommerceCWE-3453 sa önce
-
6,9Orta
CVE-2026-101274Yama var
When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did no…
pretix3 sa önce
-
5,3Orta
CVE-2026-101273Yama var
Giftcard enumeration
pretix3 sa önce
-
5,9Orta
CVE-2026-87879Yama var
Sensitive information disclosure due to improper token validation.
Acronis Cyber Protect 17CWE-3473 sa önce
-
6,3Orta
CVE-2026-87878Yama var
Linux binaries have executable stack attribute enabled.
Acronis Cyber Protect 17CWE-6933 sa önce
-
5,7Orta
CVE-2026-87099Yama var
Cross-site scripting (XSS) vulnerability due to improper input validation.
Acronis Cyber Protect 17CWE-793 sa önce
-
6,8Orta
CVE-2026-87880Yama var
Sensitive information disclosure due to missing SSL certificate verification affecting one component.
Acronis Cyber Protect 17CWE-2953 sa önce
-
6,2Orta
CVE-2026-87101Yama var
Sensitive information disclosure due to improper token validation.
Acronis Cyber Protect 17CWE-3473 sa önce