🛡️ مركز معلومات الثغرات
قاعدة بيانات الثغرات والتهديدات الأمنية المحدّثة
| المعرّف | الخطورة | CVSS | الوصف | الحالة | النشر |
|---|---|---|---|---|---|
| CVE-2025-15368 | مرتفع | 8.8 |
The SportsPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.7.26 …
|
✅ Patch | فبراير 4, 2026 |
| CVE-2025-69213 | مرتفع | 8.8 |
OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior,…
|
⚡ Exploit ✅ Patch | فبراير 4, 2026 |
| CVE-2025-69215 | مرتفع | 8.8 |
OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior,…
|
⚡ Exploit ✅ Patch | فبراير 4, 2026 |
| CVE-2026-24884 | مرتفع | 8.4 |
Compressing is a compressing and uncompressing lib for node. In version 2.0.0 and 1.10.3 and prior, Compressing extracts…
|
⚡ Exploit ✅ Patch | فبراير 4, 2026 |
| CVE-2026-24843 | مرتفع | 8.2 |
melange allows users to build apk packages using declarative pipelines. In version 0.11.3 to before 0.40.3, an attacker …
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-25055 | مرتفع | 8.1 |
n8n is an open source workflow automation platform. Prior to versions 1.123.12 and 2.4.0, when workflows process uploade…
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-24844 | مرتفع | 7.9 |
melange allows users to build apk packages using declarative pipelines. From version 0.3.0 to before 0.40.3, an attacker…
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-0537 | مرتفع | 7.8 |
A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A mal…
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-0538 | مرتفع | 7.8 |
A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A …
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-0659 | مرتفع | 7.8 |
A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bo…
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-0660 | مرتفع | 7.8 |
A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerabil…
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-0661 | مرتفع | 7.8 |
A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A mal…
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-0662 | مرتفع | 7.8 |
A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitra…
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-20979 | مرتفع | 7.8 |
Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary act…
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-20983 | مرتفع | 7.8 |
Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attacke…
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-25143 | مرتفع | 7.8 |
melange allows users to build apk packages using declarative pipelines. From version 0.10.0 to before 0.40.3, an attacke…
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-0536 | مرتفع | 7.8 |
A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerabil…
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-25157 | مرتفع | 7.7 |
OpenClaw is a personal AI assistant. Prior to version 2026.1.29, there is an OS command injection vulnerability via the …
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-20119 | مرتفع | 7.5 |
A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco Roo…
|
✅ Patch | فبراير 4, 2026 |
| CVE-2026-25499 | مرتفع | 7.5 |
Terraform / OpenTofu Provider adds support for Proxmox Virtual Environment. Prior to version 0.93.1, in the SSH configur…
|
⚡ Exploit ✅ Patch | فبراير 4, 2026 |