Web Application

🛡 Related vulnerabilities 320

Image	ID	Title	Severity	Detected
	CVE-2026-105436	Unsafe Deserialization in MainWP Child (CVE-2026-105436)	High	1 week ago
	CVE-2026-92931	CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package...	High	1 week ago
	CVE-2026-105314	Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a ...	High	1 week ago
	CVE-2026-105247	A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The...	High	1 week ago
	CVE-2026-105238	A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the...	High	1 week ago
	CVE-2026-105246	A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an...	High	1 week ago
	CVE-2026-18443	The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is...	High	2 weeks ago
	CVE-2026-97644	The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to...	High	2 weeks ago
	CVE-2026-92536	The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &...	High	2 weeks ago
	CVE-2026-82039	UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService...	High	2 weeks ago
	CVE-2026-39718	Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross...	High	2 weeks ago
	CVE-2026-96940	Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate...	High	2 weeks ago
	CVE-2026-104851	fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution	High	2 weeks ago
	CVE-2026-94422	An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial...	High	2 weeks ago
	CVE-2026-80298	Improper neutralization of special elements used in an SQL command ('SQL injection')...	High	2 weeks ago
	CVE-2026-93546	Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated...	High	2 weeks ago
	CVE-2026-84106	IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...	High	4 weeks ago
	CVE-2026-84070	IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...	High	4 weeks ago
	CVE-2026-84074	IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...	High	4 weeks ago
	CVE-2026-83304	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics ...	High	1 month ago
	CVE-2026-76958	SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted...	High	1 month ago
	CVE-2026-66767	SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to...	High	1 month ago
	CVE-2026-86544	knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code...	High	1 month ago
	CVE-2026-86541	knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace()...	High	1 month ago
	CVE-2026-86439	Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools	High	1 month ago
	CVE-2026-86539	knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api...	High	1 month ago
	CVE-2026-86538	knowns versions before 0.30.0 contain a path traversal vulnerability in the POST /api/templates...	High	1 month ago
	CVE-2026-86438	Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule...	High	1 month ago
	CVE-2026-86437	Lara Dashboard before 1.3.2 authorizes the POST /admin/settings/core-upgrades/upload endpoint...	High	1 month ago
	CVE-2026-82475	iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow...	High	1 month ago