كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 5 من 5

• متوسطةCVE-2026-82191درجة CVSS 5.315‏/09‏/2026

  Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - A crafted link to the paypal notify endpoint, if followed by a victim's browser (or an automated system that fe

  CWE-1241
• متوسطةCVE-2026-82190درجة CVSS 6.315‏/09‏/2026

  Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Anyone who obtains the site's Joomla `secret` can compute a valid access token for *any* order on the site without ever having plac

  CWE-1241
• متوسطةCVE-2026-73576درجة CVSS 6.313‏/08‏/2026

  In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated using an insecure random number generator, resulting in insufficient entropy. An

  CWE-1241synacor zimbra_collaboration_suite
• عاليةCVE-2026-57869درجة CVSS 7.107‏/07‏/2026

  Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers to access documents uploaded by landlords or tenants without authorization. This issue affects MicroRealEstate: through 1

  CWE-639CWE-1241
• متوسطةCVE-2026-6420درجة CVSS 6.306‏/05‏/2026

  A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vulnerability in the Keylime verifier. The verifier uses a hardcoded challenge nonce for Trusted Platform Module (TPM) quote

  CWE-1241