🌐

Webアプリケーション

slug: web-application

🛡 関連する脆弱性 320

ID	タイトル	重要度	検知
CVE-2026-4776	Mautic has SQL Injection in API Contact Filtering	High	4ヶ月前
CVE-2025-11262	The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...	High	4ヶ月前
CVE-2026-42760	Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and...	High	4ヶ月前
CVE-2026-42762	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...	High	4ヶ月前
CVE-2026-42746	Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for...	High	4ヶ月前
CVE-2026-42753	Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows...	High	4ヶ月前
CVE-2026-42735	Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare...	High	4ヶ月前
CVE-2026-42736	Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp...	High	4ヶ月前
CVE-2026-42737	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...	High	4ヶ月前
CVE-2026-42745	Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online...	High	4ヶ月前
CVE-2026-42730	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...	High	4ヶ月前
CVE-2026-2253	Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0,...	High	4ヶ月前
CVE-2026-5260	A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret...	High	4ヶ月前
CVE-2026-9584	A security vulnerability has been detected in code-projects Project Management System 1.0....	High	4ヶ月前
CVE-2026-42013	A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name ...	High	4ヶ月前
CVE-2026-27891	Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism	High	4ヶ月前
CVE-2026-46367	Duplicate Advisory: phpMyFAQ: Stored XSS via Utils::parseUrl() in comment rendering	High	5ヶ月前
CVE-2026-46359	phpMyFAQ has SQL Injection in CurrentUser::setTokenData through unescaped OAuth token fields	High	5ヶ月前
CVE-2026-46366	phpMyFAQ has unauthenticated FAQ permission bypass via getFaqBySolutionId fallback query	High	5ヶ月前
CVE-2021-47966	PHP Timeclock 1.04 contains time-based and boolean-based blind SQL injection vulnerabilities in...	High	5ヶ月前
CVE-2021-47959	WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows...	High	5ヶ月前
CVE-2021-47963	Anote 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to...	High	5ヶ月前
CVE-2026-4094	The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to...	High	5ヶ月前
CVE-2026-46445	SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection.	High	5ヶ月前
CVE-2026-46446	SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored,...	High	5ヶ月前
CVE-2026-8321	A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function...	High	5ヶ月前
CVE-2026-45223	Crabbox before 0.9.0 contains an authentication bypass vulnerability in the coordinator user...	High	5ヶ月前
CVE-2026-45224	Crabbox contains a path traversal vulnerability in the Islo provider's workspace path resolution	High	5ヶ月前
CVE-2026-44313	ssrf に SSRF (サーバー側リクエスト偽造) (CVE-2026-44313)	Critical	5ヶ月前
CVE-2026-42454	docker に OSコマンドインジェクション (CVE-2026-42454)	Critical	5ヶ月前