🛡️ مركز معلومات الثغرات
قاعدة بيانات الثغرات والتهديدات الأمنية المحدّثة
| المعرّف | الخطورة | CVSS | الوصف | الحالة | النشر |
|---|---|---|---|---|---|
| CVE-2026-22661 | مرتفع | 8.1 |
prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling that allows attacker…
|
— | أبريل 3, 2026 |
| CVE-2026-22664 | مرتفع | 7.7 |
prompts.chat prior to commit 30a8f04 contains a server-side request forgery vulnerability in Fal.ai media status polling…
|
— | أبريل 3, 2026 |
| CVE-2020-37216 | مرتفع | 7.5 |
Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet…
|
— | أبريل 3, 2026 |
| CVE-2026-22663 | مرتفع | 7.5 |
prompts.chat prior to commit 7b81836 contains multiple authorization bypass vulnerabilities due to missing isPrivate che…
|
— | أبريل 3, 2026 |
| CVE-2026-4108 | مرتفع | 7.3 |
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Perm…
|
— | أبريل 3, 2026 |
| CVE-2026-27655 | مرتفع | 7.3 |
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on M…
|
— | أبريل 3, 2026 |
| CVE-2026-3880 | مرتفع | 7.3 |
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client P…
|
— | أبريل 3, 2026 |
| CVE-2026-4107 | مرتفع | 7.3 |
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count a…
|
— | أبريل 3, 2026 |
| CVE-2026-3879 | مرتفع | 7.3 |
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Equipment Mailbox Deta…
|
— | أبريل 3, 2026 |
| CVE-2026-28703 | مرتفع | 7.3 |
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Mails Exchanged Betwee…
|
— | أبريل 3, 2026 |
| CVE-2022-4987 | مرتفع | 7.3 |
Hirschmann Industrial HiVision version 08.1.03 prior to 08.1.04 and 08.2.00 contains a vulnerability in the execution of…
|
— | أبريل 3, 2026 |
| CVE-2026-28756 | مرتفع | 7.3 |
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on D…
|
— | أبريل 3, 2026 |
| CVE-2026-28754 | مرتفع | 7.3 |
Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists rep…
|
— | أبريل 3, 2026 |
| CVE-2017-20238 | مرتفع | 7.1 |
Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01 contains an improper authorizat…
|
— | أبريل 3, 2026 |
| CVE-2026-34793 | مرتفع | 8.8 |
Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE paramet…
|
— | أبريل 2, 2026 |
| CVE-2026-34121 | مرتفع | 8.8 |
An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v…
|
— | أبريل 2, 2026 |
| CVE-2026-3692 | مرتفع | 8.8 |
In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may cr…
|
— | أبريل 2, 2026 |
| CVE-2026-34791 | مرتفع | 8.8 |
Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE paramet…
|
— | أبريل 2, 2026 |
| CVE-2026-5349 | مرتفع | 8.8 |
A vulnerability was identified in Trendnet TEW-657BRM 1.00.1. The affected element is the function add_apcdb of the file…
|
⚡ Exploit | أبريل 2, 2026 |
| CVE-2026-34792 | مرتفع | 8.8 |
Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE paramet…
|
— | أبريل 2, 2026 |