آخرین آسیب‌پذیری‌ها

WordPress Uncanny Automator plugin <= 7.7.1 - Broken Access Control vulnerability

Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections

Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure

Incorrect Authorization in Elasticsearch Leading to Information Disclosure

NULL Pointer Dereference in Packetbeat Leading to Denial of Service

Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure

Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion

Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure

Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure

WordPress Paid Member Subscriptions plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability

WordPress Better Search plugin <= 4.5.2 - Broken Access Control vulnerability

phpMyAdmin ShapeFile SHP File loadFromFile infinite loop

Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator

Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific co…

wlroots before 0.20.2 Out-of-Bounds Read via read_surface_class() in xwm.c

Solanum before commit 2ea1382 Buffer Overflow via Server-to-Server KILL Handler

Solanum before commit 2ce64de Heap Buffer Overflow via JOIN and SJOIN

TeXlyre from 0.11.0 before 0.13.5 Stored XSS via Recipe Icon Import

Coolify before 4.1.1 Application Name Enumeration via Manual Webhook Endpoints

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.

SolarWinds Dameware Command Injection Vulnerability