كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 4 من 4

• متوسطةCVE-2026-11864درجة CVSS 6.515‏/09‏/2026

  IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 008, and 24.0.0 through 24.0.0 Interim Fix 009 is vulnerable to an XPath injection vulnerability, which could

  CWE-643
• حرجةCVE-2026-9390درجة CVSS 9.103‏/08‏/2026

  XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup. verify() and _get_signed_xml() in lib/XML/Sig.pm build XPath expressions by concatenating the SignedInfo/Reference/@URI value read from the document being verified. The value is neither

  CWE-643CWE-1287xml\ \
• حرجةCVE-2026-44962درجة CVSS 9.929‏/05‏/2026

  Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath queries without proper sanitization. This allows an authenticated, low-privileged user to execute arbitrar

  CWE-643
• متوسطةCVE-2026-40699درجة CVSS 6.513‏/05‏/2026

  A vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged authenticated attacker to access to undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are n

  CWE-643f5 big-ip_access_policy_managerf5 big-ip_advanced_firewall_managerf5 big-ip_advanced_web_application_firewall