آخرین آسیب‌پذیری‌ها

Stored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart Feature

Campfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guard

Kirki WordPress Plugin < 6.2.5 reCAPTCHA Bypass via Missing Token

Kirki WordPress Plugin < 6.4.1 Broken Object-Level Access Control via Page API

Org.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerror

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to In…

Gimp: gimp: stack buffer overflow in psd image resource header loader

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access cou…

OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mecha…

Clear Text Storage of Password in Crypttech's Vatos DLP

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerabil…

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, le…

Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnera…

epiphany: TLS certificate warning bypass via race in tlsErrorPage message handler

Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability. A high privileged attacker with adjacent…

libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window

AFFLIB through 3.7.22 Heap Out-of-Bounds Write in af_get_page

tcpflow through 1.6.1 Out-of-Bounds Read via TCP Demultiplexer Payload Length

AxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key Scopes

Miaomiaowu before 0.9.3 Cross-User Proxy Provider Config Disclosure via external_subscription_id

OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery

UNIT3D through 9.2.0 Private Playlist Disclosure via Playlist Zip Download

MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()

ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol Connections

ArcadeDB from 21.12.1 before 26.10.2 GraphQL Schema Replacement via Read-Only Query Endpoint