كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 5 من 5

• متوسطةCVE-2024-23567درجة CVSS 4.317‏/07‏/2026

  HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locatio

  CWE-804
• متوسطةCVE-2024-23566درجة CVSS 6.517‏/07‏/2026

  HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented. It can lead to various security issues like brute force , automated attacks & account enumeration

  CWE-804
• متوسطةCVE-2026-13082درجة CVSS 5.317‏/07‏/2026

  GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge text used for the CAPTCHA by sampling characters from an array using Perl's built-in rand function, and generates a (by default) six-characte

  CWE-338CWE-804
• متوسطةCVE-2026-49953درجة CVSS 6.515‏/06‏/2026

  Discuz! X5.0 releases 20260320 through 20260610 contains a CAPTCHA bypass vulnerability that allows unauthenticated remote attackers to defeat challenge controls by exploiting limited complexity and predictable character sets in generated CAPTCHA images. Attac

  CWE-804
• متوسطةCVE-2026-40935درجة CVSS 5.321‏/04‏/2026

  WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/getCaptcha.php` accepts the CAPTCHA length (`ql`) directly from the query string with no clamping or sanitization, letting any unauthenticated client force the server to generat

  CWE-804wwbn avideo