كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 5 من 5

• متوسطةCVE-2026-11537درجة CVSS 4.318‏/09‏/2026

  IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.

  CWE-650
• متوسطةCVE-2026-16435درجة CVSS 5.914‏/09‏/2026

  IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features.

  CWE-650
• متوسطةCVE-2026-15753درجة CVSS 5.414‏/07‏/2026

  A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this vulnerability is an unknown functionality of the file /api/v1/payment/withdraw/review?action=approve. Executing a manipulation can lead to trusting http permission meth

  CWE-650
• متوسطةCVE-2026-42543درجة CVSS 4.304‏/06‏/2026

  IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 are vulnerable to a cross-site request forgery attack, because they use the HTTP method `GET` to change state on the ser

  CWE-650
• عاليةCVE-2026-44548درجة CVSS 8.112‏/05‏/2026

  ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level cross-site GET navigation from an attacker-controlled page to FundRaiserDelete.php, PropertyTypeDelete.php, or NoteDelete.php causes a logged-in ChurchCRM user with the relevant ro

  CWE-352CWE-650