|
cve-2024-12248
|
Out-of-bounds Write |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-20 |
|
cve-2025-69200
|
phpmyfaq phpmyfaq Exposure of Sensitive Information Through Data Queries |
HIGH
|
7.5
|
N/A
|
cvelistv5 |
2026-01-18 |
|
cve-2024-4443
|
businessdirectoryplugin business_directory Improper Neutralization of Special Elements used in an SQL Command |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-01-18 |
|
cve-2026-23800
|
modulards modular_ds Incorrect Privilege Assignment |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-16 |
|
cve-2025-52665
|
ui unifi_access Missing Authentication for Critical Functionality |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-01-16 |
|
cve-2025-64155
|
Fortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-15 |
|
cve-2023-7334
|
chanjetvip t\+ Deserialization of Untrusted Data |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-15 |
|
cve-2026-23550
|
modulards modular_ds Incorrect Privilege Assignment |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-14 |
|
cve-2025-68645
|
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-01-14 |
|
cve-2025-63387
|
langgenius dify Incorrect Resource Transfer Between Spheres |
MEDIUM
|
4.3
|
N/A
|
cvelistv5 |
2026-01-14 |
|
cve-2025-55749
|
XWiki xwiki Improper Access Control |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-14 |
|
cve-2024-2863
|
CVE-2024-2863 |
MEDIUM
|
5.3
|
N/A
|
cvelistv5 |
|
|
cve-2021-25281
|
SaltStack Salt Improper Authentication |
HIGH
|
N/A
|
73.13%
|
cvelistv5 |
2026-01-14 |
|
cve-2020-26836
|
SAP Solution Manager URL Redirection to Untrusted Site |
LOW
|
3.4
|
2.20%
|
cvelistv5 |
2026-01-14 |
|
cve-2017-17762
|
episerver episerver Improper Restriction of XML External Entity Reference |
HIGH
|
N/A
|
4.65%
|
cvelistv5 |
2026-01-14 |
|
cve-2026-20805
|
Microsoft Windows Information Disclosure Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-13 |
|
cve-2026-21858
|
n8n n8n Improper Input Validation |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-09 |
|
cve-2025-14436
|
brevo sendinblue_for_woocommerce Improper Neutralization of Input During Web Page Generation |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-09 |
|
cve-2024-8883
|
Red Hat build_of_keycloak URL Redirection to Untrusted Site |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-08 |
|
cve-2017-20216
|
Improper Neutralization of Special Elements used in an OS Command |
CRITICAL
|
9.8
|
12.05%
|
cvelistv5 |
2026-01-07 |
|
cve-2025-15364
|
w3eden download_manager Missing Support for Integrity Check |
HIGH
|
7.3
|
N/A
|
cvelistv5 |
2026-01-06 |
|
cve-2026-0625
|
D-Link dir-600 Missing Authentication for Critical Functionality |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-01-05 |
|
cve-2025-14998
|
wpmudev branda Authorization Bypass Through User-Controlled Key |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-01-02 |
|
cve-2025-10204
|
Missing Authentication for Critical Functionality |
HIGH
|
7.1
|
N/A
|
cvelistv5 |
2025-12-31 |
|
cve-2015-10145
|
Gargoyle Authenticated 'run_commands.sh' OS Command Execution |
HIGH
|
8.7
|
0.73%
|
cvelistv5 |
2025-12-31 |
|
cve-2025-14847
|
MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability |
HIGH
|
8.7
|
N/A
|
cvelistv5 |
2025-12-28 |
|
cve-2025-49619
|
Improper Neutralization of Special Elements Used in a Template Engine |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2025-12-27 |
|
cve-2023-44353
|
Adobe ColdFusion Deserialization of Untrusted Data |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2025-12-26 |
|
cve-2023-44352
|
Adobe ColdFusion Improper Neutralization of Input During Web Page Generation |
MEDIUM
|
6.1
|
N/A
|
cvelistv5 |
2025-12-26 |
|
cve-2010-2035
|
percha com_perchagallery Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
N/A
|
15.78%
|
cvelistv5 |
2025-12-26 |
ndaal KEV