Enterprise SaaS

🛡 Related vulnerabilities 42

Image	ID	Title	Severity	Detected
	CVE-2026-100277	In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a...	High	2 weeks ago
	CVE-2026-76967	SAP NetWeaver Business Client does not perform sufficient validation when processing certain...	High	1 month ago
	CVE-2026-79938	Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication...	High	1 month ago
	CVE-2026-19851	A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17...	High	1 month ago
	CVE-2026-71506	Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API...	High	1 month ago
	CVE-2026-40877	Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This i...	High	1 month ago
	CVE-2026-78203	Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap...	High	1 month ago
	CVE-2026-30866	Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensitive via sniffed url. This issue has been fixed in version 3.2.3.	High	1 month ago
	CVE-2026-54998	Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate...	High	3 months ago
	CVE-2026-57955	SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers...	High	3 months ago
	CVE-2026-53857	OpenClaw: Zalo allowFrom could bind to mutable display names	High	4 months ago
	CVE-2026-48305	Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write...	High	4 months ago
	CVE-2026-11462	A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. This...	High	4 months ago
	CVE-2026-7313	CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from...	High	4 months ago
	CVE-2026-47740	shopper/framework: Authorization bypass in multiple Livewire admin components	High	4 months ago
	CVE-2026-45206	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	4 months ago
	CVE-2026-34927	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	4 months ago
	CVE-2026-2740	Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and...	High	4 months ago
	CVE-2026-22069	A local privilege escalation vulnerability exists in O+ Connect because it fails to validate the...	High	4 months ago
	CVE-2026-42354	Vulnerability in sso (CVE-2026-42354)	Critical	5 months ago
	CVE-2026-44335	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-44335)	Critical	5 months ago
	CVE-2026-33823	Vulnerability in microsoft (CVE-2026-33823)	Critical	5 months ago
	CVE-2026-6973 KEV	[KEV] Vulnerability in Ivanti endpoint-manager-mobile-epmm (CVE-2026-6973)	High	5 months ago
	CVE-2025-31951	HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability. A flaw in a component's input handling was identified that could permit unauthorized comman...	High	5 months ago
	CVE-2026-38431	Code Injection in frappe (CVE-2026-38431)	Critical	5 months ago
	CVE-2024-7399 KEV	[KEV] Path Traversal in Samsung magicinfo-9-server (CVE-2024-7399)	High	5 months ago
	CVE-2024-27199 KEV	[KEV] Vulnerability in Jetbrains teamcity (CVE-2024-27199)	High	5 months ago
	CVE-2025-48700 KEV	[KEV] Cross-Site Scripting (XSS) in Synacor zimbra-collaboration-suite-zcs (CVE-2025-48700)	High	5 months ago
	CVE-2026-34197 KEV	[KEV] Vulnerability in Apache activemq (CVE-2026-34197)	High	6 months ago
	CVE-2020-9715 KEV	[KEV] Use-After-Free in Adobe acrobat (CVE-2020-9715)	High	6 months ago