🌐

Webアプリケーション

slug: web-application

🛡 関連する脆弱性 320

ID	タイトル	重要度	検知
CVE-2026-34621 KEV	【KEV】Adobe acrobat-and-reader の脆弱性 (CVE-2026-34621)	High	6ヶ月前
CVE-2026-4326	The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activate...	High	6ヶ月前
CVE-2026-3243	The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up to, and including, 1....	High	6ヶ月前
CVE-2026-35209	defu is software that allows uers to assign default properties recursively. Prior to version 6.1.5, applications that pass unsanitized user input (e.g. parsed JSON request bodies, database records, or...	High	6ヶ月前
CVE-2026-1233	The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...	High	6ヶ月前
CVE-2026-3445	The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass i...	High	6ヶ月前
CVE-2026-4896	The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclu...	High	6ヶ月前
CVE-2026-4350	The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1. This is due to the `PMCS::action_handler()` method proce...	High	6ヶ月前
CVE-2026-3502 KEV	【KEV】TrueConf Client の脆弱性 (CVE-2026-3502)	High	6ヶ月前
CVE-2026-33017 KEV	【KEV】Langflow にコードインジェクション (CVE-2026-33017)	Critical	6ヶ月前
CVE-2026-23921	A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in...	High	6ヶ月前
CVE-2026-23920	Host and event action script input is validated with a regex (set by the administrator), but the...	High	6ヶ月前
CVE-2025-12821	The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 0.2.5...	High	7ヶ月前
CVE-2025-70151	Fabian に危険なファイルアップロード (CVE-2025-70151)	High	7ヶ月前
CVE-2026-1618	Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc....	High	8ヶ月前
CVE-2020-37210	SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste i...	High	8ヶ月前
CVE-2020-37211	SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character...	High	8ヶ月前
CVE-2020-37212	SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste...	High	8ヶ月前
CVE-2026-1819	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')...	High	8ヶ月前
CVE-2025-2155	Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade...	High	9ヶ月前
CVE-2025-64666	microsoft の脆弱性 (CVE-2025-64666)	High	10ヶ月前
CVE-2025-64140	Jenkins に OSコマンドインジェクション (CVE-2025-64140)	High	11ヶ月前
CVE-2025-54236 KEV	【KEV】Adobe commerce の脆弱性 (CVE-2025-54236)	Critical	11ヶ月前
CVE-2025-10458	Zephyrproject の脆弱性 (CVE-2025-10458)	High	1年前
CVE-2025-2411	Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano...	High	1年前
CVE-2025-2413	Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor...	High	1年前
CVE-2025-0610	Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request...	High	1年前
CVE-2025-53786	microsoft に認証バイパス (CVE-2025-53786)	High	1年前
CVE-2025-1675	Zephyrproject に境界外読み取り (CVE-2025-1675)	High	1年前
CVE-2024-5971	A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not s...	High	2年前