🛡️ مركز معلومات الثغرات
قاعدة بيانات الثغرات والتهديدات الأمنية المحدّثة
| المعرّف | الخطورة | CVSS | الوصف | الحالة | النشر |
|---|---|---|---|---|---|
| CVE-2025-69414 | مرتفع | 8.5 |
Plex Media Server (PMS) through 1.42.2.10156 allows retrieval of a permanent access token via a /myplex/account call wit…
|
⚡ Exploit ✅ Patch | يناير 2, 2026 |
| CVE-2026-21451 | مرتفع | 8.4 |
Bagisto is an open source laravel eCommerce platform. A stored Cross-Site Scripting (XSS) vulnerability exists in Bagist…
|
⚡ Exploit ✅ Patch | يناير 2, 2026 |
| CVE-2025-52863 | مرتفع | 8.1 |
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker…
|
✅ Patch | يناير 2, 2026 |
| CVE-2025-52864 | مرتفع | 8.1 |
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker…
|
✅ Patch | يناير 2, 2026 |
| CVE-2025-52872 | مرتفع | 8.1 |
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker…
|
✅ Patch | يناير 2, 2026 |
| CVE-2025-62842 | مرتفع | 7.8 |
An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attac…
|
✅ Patch | يناير 2, 2026 |
| CVE-2025-59384 | مرتفع | 7.5 |
A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerabil…
|
✅ Patch | يناير 2, 2026 |
| CVE-2025-9110 | مرتفع | 7.5 |
An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect …
|
✅ Patch | يناير 2, 2026 |
| CVE-2025-15426 | مرتفع | 7.3 |
A vulnerability was identified in jackying H-ui.admin up to 3.1. This affects an unknown function in the library /lib/we…
|
✅ Patch | يناير 2, 2026 |
| CVE-2025-69415 | مرتفع | 7.1 |
In Plex Media Server (PMS) through 1.42.2.10156, ability to access /myplex/account with a device token is not properly a…
|
⚡ Exploit ✅ Patch | يناير 2, 2026 |
| CVE-2025-48769 | مرتفع | 8.1 |
Use After Free vulnerability was discovered in fs/vfs/fs_rename code of the Apache NuttX RTOS, that due recursive implem…
|
✅ Patch | يناير 1, 2026 |
| CVE-2026-21428 | مرتفع | 7.5 |
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.0, the ``write_h…
|
⚡ Exploit ✅ Patch | يناير 1, 2026 |
| CVE-2025-68619 | مرتفع | 7.2 |
Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the appstore i…
|
⚡ Exploit ✅ Patch | يناير 1, 2026 |