Tutte le CVE degli ultimi sei mesi, aggiornate ogni giorno.
Vulnerabilità pubblicate direttamente dal National Vulnerability Database, con gravità, classe CWE e prodotti interessati. Cercale, filtrale e guarda cosa è uscito oggi.
- 371 pubblicate nelle ultime 24 ore
- 2951 negli ultimi 7 giorni
- 58.458 negli ultimi sei mesi
Fonte: NVD (National Vulnerability Database) · Aggiornato il 24 set 2026
Mostrate 5 di 5
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.
IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features.
A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this vulnerability is an unknown functionality of the file /api/v1/payment/withdraw/review?action=approve. Executing a manipulation can lead to trusting http permission meth
IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 are vulnerable to a cross-site request forgery attack, because they use the HTTP method `GET` to change state on the ser
ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level cross-site GET navigation from an attacker-controlled page to FundRaiserDelete.php, PropertyTypeDelete.php, or NoteDelete.php causes a logged-in ChurchCRM user with the relevant ro
Trova il bug prima di un attaccante.
Accedi con GitHub e avvia il tuo primo audit in meno di un minuto. Il piano gratuito non richiede carta di credito.