Sign in Sign up
JA · EN · FR
SecPulse
🌐

Web Application

slug: web-application

🛡 Related vulnerabilities 320

Image ID Title
CVE-2026-82472 Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without...
CVE-2026-82466 Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route...
CVE-2026-81421 A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected...
CVE-2026-77652 A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format...
CVE-2026-68863 Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow...
CVE-2026-68861 Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special...
CVE-2021-23758 KEV [KEV] Unsafe Deserialization in Ajax.net professional AjaxNetProfessional (CVE-2021-23758)
CVE-2026-18328 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
CVE-2026-16601 The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is...
CVE-2026-18323 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...
CVE-2026-68960 A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager....
CVE-2026-78681 NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses
CVE-2026-78680 NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary
CVE-2026-75574 The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled...
CVE-2026-78675 GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)
CVE-2026-72695 Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion
CVE-2026-56707 Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass...
CVE-2026-56702 Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the...
CVE-2026-34968 Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the...
CVE-2026-76098 Mistune: Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown
CVE-2026-71504 Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API...
CVE-2026-71506 Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API...
CVE-2026-71505 Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API...
CVE-2026-40877 Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This i...
CVE-2026-30864 Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to Reflected Cross-Site Scripting (XSS) in the dashboard revert functionality. This issue has been fixed in v...
CVE-2026-78208 exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage()...
CVE-2026-78209 exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at...
CVE-2026-78206 exceljs-hardened before 5.0.0 decompresses all entries from supplied xlsx archives into memory...
CVE-2026-78161 A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function...
CVE-2026-78203 Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details