آخرین آسیب‌پذیری‌ها

Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure

Incorrect Authorization in Elasticsearch Leading to Information Disclosure

NULL Pointer Dereference in Packetbeat Leading to Denial of Service

Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure

Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion

Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure

Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure

WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability

WordPress Better Search plugin <= 4.5.2 - Broken Access Control vulnerability

phpMyAdmin ShapeFile SHP File loadFromFile infinite loop

Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator

Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific co…

wlroots before 0.20.2 Out-of-Bounds Read via read_surface_class() in xwm.c

Solanum before commit 2ea1382 Buffer Overflow via Server-to-Server KILL Handler

Solanum before commit 2ce64de Heap Buffer Overflow via JOIN and SJOIN

TeXlyre from 0.11.0 before 0.13.5 Stored XSS via Recipe Icon Import

Coolify before 4.1.1 Application Name Enumeration via Manual Webhook Endpoints

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

SolarWinds Dameware Command Injection Vulnerability

SolarWinds Dameware Buffer Overflow Vulnerability

mongorestore may restore encoded collection names into an unintended collection

SolarWinds Dameware DLL Hijacking Vulnerability

Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory