🛡️ مركز معلومات الثغرات
قاعدة بيانات الثغرات والتهديدات الأمنية المحدّثة
| المعرّف | الخطورة | CVSS | الوصف | الحالة | النشر |
|---|---|---|---|---|---|
| CVE-2026-4999 | متوسط | 6.3 |
A security vulnerability has been detected in z-9527 admin up to 72aaf2dd05cf4ec2e98f390668b41e128eec5ad2. This issue af…
|
— | مارس 28, 2026 |
| CVE-2026-2595 | متوسط | 5.4 |
The Quads Ads Manager for Google AdSense plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions u…
|
— | مارس 28, 2026 |
| CVE-2026-5014 | متوسط | 5.3 |
A vulnerability was found in elecV2 elecV2P up to 3.8.3. The affected element is the function path.join of the file /log…
|
— | مارس 28, 2026 |
| CVE-2026-2442 | متوسط | 5.3 |
The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Improper Neutralizatio…
|
— | مارس 28, 2026 |
| CVE-2026-5007 | متوسط | 5.3 |
A vulnerability was identified in kazuph mcp-docs-rag up to 0.5.0. Affected is the function cloneRepository of the file …
|
— | مارس 28, 2026 |
| CVE-2026-5003 | متوسط | 5.3 |
A vulnerability was found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. This affects the fun…
|
— | مارس 28, 2026 |
| CVE-2026-4997 | متوسط | 5.3 |
A security flaw has been discovered in Sinaptik AI PandasAI up to 3.0.0. This affects the function is_sql_query_safe of …
|
— | مارس 28, 2026 |
| CVE-2026-5013 | متوسط | 5.3 |
A vulnerability has been found in elecV2 elecV2P up to 3.8.3. Impacted is the function path.join of the file /store/:key…
|
— | مارس 28, 2026 |
| CVE-2025-53521 | حرج | 9.8 |
F5 BIG-IP — CVE-2025-53521
F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could allow a threat …
|
— | مارس 27, 2026 |
| CVE-2026-33757 | حرج | 9.6 |
OpenBao is an open source identity-based secrets management system. Prior to version 2.5.2, OpenBao does not prompt for …
|
✅ Patch | مارس 27, 2026 |
| CVE-2026-33767 | مرتفع | 8.8 |
WWBN AVideo is an open source video platform. In versions up to and including 26.0, in `objects/like.php`, the `getLike(…
|
⚡ Exploit ✅ Patch | مارس 27, 2026 |
| CVE-2026-33735 | مرتفع | 8.8 |
MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.69, an authorization bypas…
|
⚡ Exploit ✅ Patch | مارس 27, 2026 |
| CVE-2026-4906 | مرتفع | 8.8 |
A vulnerability was determined in Tenda AC5 15.03.06.47. The affected element is the function decodePwd of the file /gof…
|
⚡ Exploit | مارس 27, 2026 |
| CVE-2026-4974 | مرتفع | 8.8 |
A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fromSetSysTime of the file /gofor…
|
⚡ Exploit | مارس 27, 2026 |
| CVE-2026-4975 | مرتفع | 8.8 |
A vulnerability has been found in Tenda AC15 15.03.05.19. This affects the function formSetCfm of the file /goform/setcf…
|
⚡ Exploit | مارس 27, 2026 |
| CVE-2026-34386 | مرتفع | 8.8 |
Fleet is open source device management software. Prior to 4.81.0, a SQL injection vulnerability in Fleet's MDM bootstrap…
|
— | مارس 27, 2026 |
| CVE-2026-4904 | مرتفع | 8.8 |
A vulnerability has been found in Tenda AC5 15.03.06.47. This issue affects the function formSetCfm of the file /goform/…
|
⚡ Exploit | مارس 27, 2026 |
| CVE-2026-4905 | مرتفع | 8.8 |
A vulnerability was found in Tenda AC5 15.03.06.47. Impacted is the function formWifiWpsOOB of the file /goform/WifiWpsO…
|
⚡ Exploit | مارس 27, 2026 |
| CVE-2026-26060 | مرتفع | 8.8 |
Fleet is open source device management software. Prior to 4.81.0, a vulnerability in Fleet’s password management logic c…
|
— | مارس 27, 2026 |
| CVE-2026-25099 | مرتفع | 8.8 |
Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any type and extension wi…
|
— | مارس 27, 2026 |