🌐

Webアプリケーション

slug: web-application

🛡 関連する脆弱性 320

ID	タイトル	重要度	検知
CVE-2026-65442	Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versions.	High	2ヶ月前
CVE-2026-65441	Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.	High	2ヶ月前
CVE-2026-65437	Unauthenticated Cross Site Scripting (XSS) in Spam protection, AntiSpam, FireWall by CleanTalk <=...	High	2ヶ月前
CVE-2026-61957	Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions.	High	2ヶ月前
CVE-2026-61953	Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.	High	2ヶ月前
CVE-2026-66040	FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability...	High	2ヶ月前
CVE-2026-15074	@fastify/static vulnerable to route guard bypass via path traversal	High	2ヶ月前
CVE-2026-9323	The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id)...	High	2ヶ月前
CVE-2026-11826	OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core...	High	2ヶ月前
CVE-2026-16158	Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal URL cache key by concatenating the destination and source path without a delimiter. Different destinat...	High	2ヶ月前
CVE-2026-15631	Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the resolved WebSocket destination path against the configured rewrite prefix. The WebSocket routing path in...	High	2ヶ月前
CVE-2026-7872	IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to read arbitrary files...	High	2ヶ月前
CVE-2026-8056	IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters...	High	2ヶ月前
CVE-2026-7754	IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery ...	High	2ヶ月前
CVE-2026-7667	IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow...	High	2ヶ月前
CVE-2026-63030 KEV	【KEV】WordPress Core の脆弱性 (CVE-2026-63030)	Critical	2ヶ月前
CVE-2026-55234	Wekan is open source kanban built with Meteor. Prior to 9.37, Wekan DDP update allow rules in server/permissions/cards.js, server/permissions/lists.js, and server/permissions/swimlanes.js authorize ag...	High	3ヶ月前
CVE-2026-52890	Wekan is open source kanban built with Meteor. Prior to 9.31, Wekan allows a logged-in board member to insert an attachment document through the /attachments/insert DDP method with attacker-controlled...	High	3ヶ月前
CVE-2026-14802	react-dev-utils openBrowser permits command injection on macOS	High	3ヶ月前
CVE-2026-57278	GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)...	High	3ヶ月前
CVE-2026-57277	GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)...	High	3ヶ月前
CVE-2026-57276	GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)...	High	3ヶ月前
CVE-2026-57275	GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)...	High	3ヶ月前
CVE-2026-57274	GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)...	High	3ヶ月前
CVE-2026-57270	GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)...	High	3ヶ月前
CVE-2026-57273	GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)...	High	3ヶ月前
CVE-2026-57272	GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)...	High	3ヶ月前
CVE-2026-57271	GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)...	High	3ヶ月前
CVE-2026-13125	GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud)...	High	3ヶ月前
CVE-2026-57950	ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control...	High	3ヶ月前