كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 4 من 4

• متوسطةCVE-2026-86198درجة CVSS 4.209‏/09‏/2026

  PocketMine-MP versions before 5.44.2 fail to properly validate multiple ResourcePackClientResponsePacket packets with STATUS_COMPLETED status during resource pack handling. Malicious clients can send batches of these packets to repeatedly trigger pre-spawn pro

  CWE-837
• متوسطةCVE-2026-45734درجة CVSS 5.318‏/08‏/2026

  MyBB is free and open source forum software. Prior to 1.8.40, the built-in CAPTCHA does not consistently enforce single-use semantics, allowing remote attackers to bypass CAPTCHA controls through challenge replay. The successful validation paths in contact.php

  CWE-837
• عاليةCVE-2026-42609درجة CVSS 8.111‏/05‏/2026

  Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a business logic vulnerability in the Grav Admin Panel allows a low-privileged user (with only user creation permissions) to overwrite existing accounts, including the primary administrator. By creating

  CWE-269CWE-285CWE-639getgrav grav
• منخفضةCVE-2026-44601درجة CVSS 3.707‏/05‏/2026

  Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009.

  CWE-837torproject tor