🛡️ مركز معلومات الثغرات
قاعدة بيانات الثغرات والتهديدات الأمنية المحدّثة
| المعرّف | الخطورة | CVSS | الوصف | الحالة | النشر |
|---|---|---|---|---|---|
| CVE-2026-22783 | حرج | 9.6 |
Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior…
|
✅ Patch | يناير 12, 2026 |
| CVE-2025-8110 | حرج | 9.0 |
Gogs Path Traversal Vulnerability — Gogs contains a path traversal vulnerability affecting improper Symbolic link handli…
|
⚡ Exploit ✅ Patch | يناير 12, 2026 |
| CVE-2026-22688 | حرج | 9.9 |
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.…
|
⚡ Exploit ✅ Patch | يناير 10, 2026 |
| CVE-2025-64090 | حرج | 10.0 |
This vulnerability allows authenticated attackers to execute commands via the hostname of the device.
|
✅ Patch | يناير 9, 2026 |
| CVE-2025-69222 | حرج | 9.1 |
LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 is prone to a server-side request forgery (SSRF…
|
⚡ Exploit ✅ Patch | يناير 7, 2026 |
| CVE-2009-0556 | حرج | 9.0 |
Microsoft Office PowerPoint Code Injection Vulnerability — Microsoft Office PowerPoint contains a code injection vulnera…
|
⚡ Exploit ✅ Patch | يناير 7, 2026 |
| CVE-2025-37164 | حرج | 9.0 |
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability — Hewlett Packard Enterprise (HPE) OneView contain…
|
⚡ Exploit ✅ Patch | يناير 7, 2026 |
| CVE-2025-59157 | حرج | 9.9 |
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0…
|
⚡ Exploit ✅ Patch | يناير 5, 2026 |
| CVE-2025-64420 | حرج | 9.9 |
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions …
|
⚡ Exploit ✅ Patch | يناير 5, 2026 |
| CVE-2025-64419 | حرج | 9.6 |
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0…
|
⚡ Exploit ✅ Patch | يناير 5, 2026 |
| CVE-2025-66398 | حرج | 9.6 |
Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.19.0, an unauthenticate…
|
⚡ Exploit ✅ Patch | يناير 1, 2026 |
| CVE-2025-14847 | حرج | 9.0 |
MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability — MongoDB Server contains a…
|
⚡ Exploit ✅ Patch | ديسمبر 29, 2025 |
| CVE-2023-52163 | حرج | 9.0 |
Digiever DS-2105 Pro Missing Authorization Vulnerability — Digiever DS-2105 Pro contains a missing authorization vulnera…
|
⚡ Exploit ✅ Patch | ديسمبر 22, 2025 |
| CVE-2025-14733 | حرج | 9.0 |
WatchGuard Firebox Out of Bounds Write Vulnerability — WatchGuard Fireware OS iked process contains an out of bounds wri…
|
⚡ Exploit ✅ Patch | ديسمبر 19, 2025 |
| CVE-2025-20393 | حرج | 9.0 |
Cisco Multiple Products Improper Input Validation Vulnerability — Cisco Secure Email Gateway, Secure Email, AsyncOS Soft…
|
⚡ Exploit ✅ Patch | ديسمبر 17, 2025 |
| CVE-2025-40602 | حرج | 9.0 |
SonicWall SMA1000 Missing Authorization Vulnerability — SonicWall SMA1000 contains a missing authorization vulnerability…
|
⚡ Exploit ✅ Patch | ديسمبر 17, 2025 |
| CVE-2025-59374 | حرج | 9.0 |
ASUS Live Update Embedded Malicious Code Vulnerability — ASUS Live Update contains an embedded malicious code vulnerabil…
|
⚡ Exploit ✅ Patch | ديسمبر 17, 2025 |
| CVE-2025-59718 | حرج | 9.0 |
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability — Fortinet FortiOS, FortiSwitc…
|
⚡ Exploit ✅ Patch | ديسمبر 16, 2025 |
| CVE-2025-43529 | حرج | 9.0 |
Apple Multiple Products Use-After-Free WebKit Vulnerability — Apple iOS, iPadOS, macOS, and other Apple products contain…
|
⚡ Exploit ✅ Patch | ديسمبر 15, 2025 |
| CVE-2025-14611 | حرج | 9.0 |
Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability — Gladinet CentreStack and TrioFox contain a har…
|
⚡ Exploit ✅ Patch | ديسمبر 15, 2025 |