آخرین آسیب‌پذیری‌ها
| شناسه | شدت | شرح | EPSS | انتشار |
|---|---|---|---|---|
| CVE-2025-71450 | 4.8متوسط |
inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loop
benhoyt inih
|
۰٫۱۲٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-74993 | 7.5بالا |
SQL Injection in Starnet Computer Systems' Inventory Tracking Application
Starnet Computer and Network Systems Inventory Tracking Application
|
۰٫۳۷٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-111959 | بدون امتیاز |
Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads
Apache Software Foundation Apache Arrow Rust
|
۰٫۲۳٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-102802 | 8.9بالا |
Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere extension < 20.1.1
regularlabs.com Articles Anywhere extension for Joomlaregularlabs.com Sourcerer Free extension for Joomlaregularlabs.com Sourcerer Pro extension for Joomla
|
۰٫۳۹٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-103419 | 8.6بالا |
Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.
joomshaper.com Helix Ultimate extension for Joomla
|
۰٫۳۶٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-103420 | 7.2بالا |
Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5
php-web-design.com StageIt extension for Joomla
|
۰٫۲٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-105600 | 8.6بالا |
Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5
php-web-design.com StageIt extension for Joomla
|
۰٫۳۹٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-105601 | 5.3متوسط |
Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5
php-web-design.com StageIt extension for Joomla
|
۰٫۴٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-105602 | 8.6بالا |
Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.
joomshaper.com Helix Ultimate extension for Joomla
|
۰٫۳۶٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-102801 | 5.1متوسط |
Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla < 3.0.1
regularlabs.com Users Anywhere extension for Joomla
|
۰٫۴۳٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-114364 | بدون امتیاز |
Apache Syncope: SQL injection via unsanitized opEvent in Audit Events search
Apache Software Foundation Apache Syncope
|
۰٫۲۲٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-113687 | بدون امتیاز |
Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass
Apache Software Foundation Apache Syncope
|
۰٫۲۲٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-113511 | بدون امتیاز |
Apache Syncope: Delegated administration boundaries can be bypassed for Realm update
Apache Software Foundation Apache Syncope
|
۰٫۲۲٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-120463 | 6.0متوسط |
Warracker before 1.0.4 Missing Authorization via Paperless-ngx Document Linking
sassanix Warracker
|
۰٫۳۱٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-110535 | بدون امتیاز |
Apache Syncope: AuthProfile value escalation via self-service update
Apache Software Foundation Apache Syncope
|
۰٫۲۶٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-109083 | بدون امتیاز |
Apache Syncope: Remote Code Execution via Flowable JUEL expression
Apache Software Foundation Apache Syncope
|
۰٫۲۲٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-116606 | 9.3بحرانی |
Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway
Barracuda Networks Barracuda Email Security Gateway
|
۰٫۷۲٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-111560 | 8.6بالا |
OS Command Injection in Barracuda Appliances
Barracuda Networks Barracuda Email Security GatewayBarracuda Networks Barracuda Load Balancer Application Delivery ControllerBarracuda Networks Barracuda Message Archiver
|
۰٫۴۷٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-91903 | 6.1متوسط |
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with adjacent network access coul…
Dell OpenManage Enterprise
|
۰٫۲٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-92886 | 7.8بالا |
Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's eta-register
TÜBİTAK BİLGEM Software Technologies Research Institute eta-register
|
۰٫۱۳٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-91904 | 5.5متوسط |
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerabil…
Dell OpenManage Enterprise
|
۰٫۰۹٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-91905 | 6.4متوسط |
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability,…
Dell OpenManage Enterprise
|
۰٫۰۸٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-91906 | 5.5متوسط |
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerabil…
Dell OpenManage Enterprise
|
۰٫۱۳٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-94349 | 8.0بالا |
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with adjacent network …
Dell OpenManage Enterprise
|
۲٫۱۶٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|
| CVE-2026-91907 | 6.8متوسط |
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An unauthenticated attacker with remote access could p…
Dell OpenManage Enterprise
|
۰٫۱۴٪ |
۱۴۰۵/۰۸/۱۱
۱ روز پیش
|