Webアプリケーション

🛡 関連する脆弱性 283

	ID	タイトル	重要度	検知
	CVE-2026-34621 KEV	【KEV】Adobe acrobat-and-reader の脆弱性 (CVE-2026-34621)	High	4ヶ月前
	CVE-2026-4326	The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activate...	High	4ヶ月前
	CVE-2026-3243	The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up to, and including, 1....	High	4ヶ月前
	CVE-2026-35209	defu is software that allows uers to assign default properties recursively. Prior to version 6.1.5, applications that pass unsanitized user input (e.g. parsed JSON request bodies, database records, or...	High	4ヶ月前
	CVE-2026-1233	The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...	High	4ヶ月前
	CVE-2026-3445	The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass i...	High	4ヶ月前
	CVE-2026-4896	The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclu...	High	4ヶ月前
	CVE-2026-4350	The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1. This is due to the `PMCS::action_handler()` method proce...	High	4ヶ月前
	CVE-2026-3502 KEV	【KEV】Trueconf client の脆弱性 (CVE-2026-3502)	High	4ヶ月前
	CVE-2026-33017 KEV	【KEV】langflow の脆弱性 (CVE-2026-33017)	Critical	5ヶ月前
	CVE-2026-1618	Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc....	High	6ヶ月前
	CVE-2020-37210	SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste i...	High	6ヶ月前
	CVE-2020-37211	SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character...	High	6ヶ月前
	CVE-2020-37212	SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste...	High	6ヶ月前
	CVE-2026-1819	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')...	High	6ヶ月前
	CVE-2025-2155	Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade...	High	8ヶ月前
	CVE-2025-64666	microsoft の脆弱性 (CVE-2025-64666)	High	8ヶ月前
	CVE-2025-54236 KEV	【KEV】Adobe commerce の脆弱性 (CVE-2025-54236)	Critical	10ヶ月前
	CVE-2025-2411	Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano...	High	11ヶ月前
	CVE-2025-2413	Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor...	High	11ヶ月前
	CVE-2025-0610	Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request...	High	11ヶ月前
	CVE-2025-53786	microsoft に 認証バイパス (CVE-2025-53786)	High	1年前
	CVE-2024-5971	A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not s...	High	2年前
	CVE-2024-27289	pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the following conditions are met: the non-default simple protocol is used; a placeholder for...	High	2年前
	CVE-2022-27224	An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated...	High	4年前
	CVE-2021-41164	CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The...	High	4年前
	CVE-2020-7564	schneider-electric の脆弱性 (CVE-2020-7564)	High	5年前
	CVE-2020-11111	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, an...	High	6年前
	CVE-2020-11112	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/common...	High	6年前
	CVE-2020-11113	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).	High	6年前