كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 4 من 4

• متوسطةCVE-2026-71478درجة CVSS 6.106‏/08‏/2026

  league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src unsafe-link filter can be bypassed by embedding control bytes, such as a tab, carriage return, line feed, or leadin

  CWE-79CWE-86CWE-692
• متوسطةCVE-2024-42214درجة CVSS 5.317‏/07‏/2026

  HCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of the methods that are supported by the Web server which allows an attacker to narrow and intensify their efforts.

  CWE-692
• متوسطةCVE-2024-23569درجة CVSS 4.317‏/07‏/2026

  HCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" header

  CWE-692
• متوسطةCVE-2026-15295درجة CVSS 4.410‏/07‏/2026

  The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 7.0.1 due to insufficient input sanitization and output escaping. This makes it possible f

  CWE-692