🛡️ مركز معلومات الثغرات
قاعدة بيانات الثغرات والتهديدات الأمنية المحدّثة
| المعرّف | الخطورة | CVSS | الوصف | الحالة | النشر |
|---|---|---|---|---|---|
| CVE-2026-6492 | متوسط | 5.3 |
A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc761974c7616f44c2bbc04bea.…
|
— | أبريل 17, 2026 |
| CVE-2026-6494 | متوسط | 5.3 |
A flaw was found in the AAP MCP server. An unauthenticated remote attacker can exploit a log injection vulnerability by …
|
— | أبريل 17, 2026 |
| CVE-2026-5234 | متوسط | 5.3 |
The LatePoint plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includin…
|
— | أبريل 17, 2026 |
| CVE-2026-6491 | متوسط | 5.3 |
A security vulnerability has been detected in libvips up to 8.18.2. The affected element is the function im_minpos_vec o…
|
— | أبريل 17, 2026 |
| CVE-2026-5427 | متوسط | 5.3 |
The Kubio plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 2.7.2. This is due…
|
— | أبريل 17, 2026 |
| CVE-2026-5797 | متوسط | 5.3 |
The Quiz And Survey Master plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to and inc…
|
— | أبريل 17, 2026 |
| CVE-2026-5502 | متوسط | 5.3 |
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized course content m…
|
— | أبريل 17, 2026 |
| CVE-2026-34197 | حرج | 9.8 |
Apache ActiveMQ — CVE-2026-34197
Apache ActiveMQ contains an improper input validation vulnerability that allows for cod…
|
— | أبريل 16, 2026 |
| CVE-2026-40900 | مرتفع | 8.8 |
DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection…
|
⚡ Exploit | أبريل 16, 2026 |
| CVE-2026-3614 | مرتفع | 8.8 |
The AcyMailing plugin for WordPress is vulnerable to privilege escalation in all versions From 9.11.0 up to, and includi…
|
— | أبريل 16, 2026 |
| CVE-2023-3634 | مرتفع | 8.8 |
In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of u…
|
— | أبريل 16, 2026 |
| CVE-2026-33083 | مرتفع | 8.8 |
DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection…
|
⚡ Exploit | أبريل 16, 2026 |
| CVE-2026-6348 | مرتفع | 8.8 |
WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local…
|
— | أبريل 16, 2026 |
| CVE-2026-1620 | مرتفع | 8.8 |
The Livemesh Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and …
|
— | أبريل 16, 2026 |
| CVE-2026-40901 | مرتفع | 8.8 |
DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below ship the legacy velocit…
|
⚡ Exploit | أبريل 16, 2026 |
| CVE-2026-33084 | مرتفع | 8.8 |
DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection…
|
⚡ Exploit | أبريل 16, 2026 |
| CVE-2025-14868 | مرتفع | 8.8 |
The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitr…
|
— | أبريل 16, 2026 |
| CVE-2026-40502 | مرتفع | 8.8 |
OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote gateway users with cha…
|
— | أبريل 16, 2026 |
| CVE-2026-33207 | مرتفع | 8.8 |
DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection…
|
⚡ Exploit | أبريل 16, 2026 |
| CVE-2026-33121 | مرتفع | 8.8 |
DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection…
|
⚡ Exploit | أبريل 16, 2026 |