🌐

Webアプリケーション

slug: web-application

🛡 関連する脆弱性 320

ID	タイトル	重要度	検知
CVE-2026-82472	Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without...	High	1ヶ月前
CVE-2026-82466	Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route...	High	1ヶ月前
CVE-2026-81421	A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected...	High	1ヶ月前
CVE-2026-77652	A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format...	High	1ヶ月前
CVE-2026-68863	Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow...	High	1ヶ月前
CVE-2026-68861	Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special...	High	1ヶ月前
CVE-2021-23758 KEV	【KEV】Ajax.net professional AjaxNetProfessional に安全でないデシリアライゼーション (CVE-2021-23758)	High	1ヶ月前
CVE-2026-18328	The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...	High	1ヶ月前
CVE-2026-16601	The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is...	High	1ヶ月前
CVE-2026-18323	The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...	High	1ヶ月前
CVE-2026-68960	A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager....	High	1ヶ月前
CVE-2026-78681	NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses	High	1ヶ月前
CVE-2026-78680	NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary	High	1ヶ月前
CVE-2026-75574	The Grav Email plugin (getgrav/grav-plugin-email) before 4.2.2 renders page-editor-controlled...	High	1ヶ月前
CVE-2026-78675	GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)	High	1ヶ月前
CVE-2026-72695	Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion	High	1ヶ月前
CVE-2026-56707	Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass...	High	1ヶ月前
CVE-2026-56702	Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the...	High	1ヶ月前
CVE-2026-34968	Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the...	High	1ヶ月前
CVE-2026-76098	Mistune: Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown	High	1ヶ月前
CVE-2026-71504	Dolibarr before 24.0.0 contains an improper authorization vulnerability in the Members REST API...	High	1ヶ月前
CVE-2026-71506	Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API...	High	1ヶ月前
CVE-2026-71505	Dolibarr before 24.0.0 contains a broken object-level authorization vulnerability in the REST API...	High	1ヶ月前
CVE-2026-40877	Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This i...	High	1ヶ月前
CVE-2026-30864	Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to Reflected Cross-Site Scripting (XSS) in the dashboard revert functionality. This issue has been fixed in v...	High	1ヶ月前
CVE-2026-78208	exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage()...	High	1ヶ月前
CVE-2026-78209	exceljs-hardened versions before 5.0.0 fail to neutralize leading equals, plus, minus, or at...	High	1ヶ月前
CVE-2026-78206	exceljs-hardened before 5.0.0 decompresses all entries from supplied xlsx archives into memory...	High	1ヶ月前
CVE-2026-78161	A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function...	High	1ヶ月前
CVE-2026-78203	Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap...	High	1ヶ月前