Busca de CVEs
386.205 resultadosCVE-2026-12511HIGHAI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path TraversalEPSS 0.3%CVE-2026-11567MEDIUMSureForms < 2.11.1 - Unauthenticated Payment Amount BypassEPSS 0.3%CVE-2026-11563CRITICALWord Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via Path TraversalEPSS 0.2%CVE-2025-15665MEDIUMBEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode FieldEPSS 0.2%CVE-2026-15675MEDIUMcode-projects Online Job Portal EditUser.php sql injectionEPSS 0.4%CVE-2026-15672MEDIUMitsourcecode Electronic Judging System add_judges.php sql injectionEPSS 0.3%CVE-2026-15669MEDIUMlouisho5 picobot exec Tool exec.go ExecTool.Execute os command injectionEPSS 1.1%CVE-2026-12482LOWPath Traversal via Symlink Name Validation Bypass in keras-team/kerasEPSS 0.2%CVE-2026-15668MEDIUMlouisho5 picobot web Tool web.go WebTool.Execute server-side request forgeryEPSS 0.4%CVE-2026-15629MEDIUMlouisho5 picobot Workspace filesystem.go GetSkill link followingEPSS 0.4%CVE-2026-15628MEDIUMzhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgeryEPSS 0.4%CVE-2026-15627MEDIUMnextlevelbuilder GoClaw tool.go handleNavigate information disclosureEPSS 0.4%CVE-2026-15626MEDIUMnextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversalEPSS 0.4%CVE-2026-15625MEDIUMnextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklistEPSS 0.5%CVE-2026-15624MEDIUMnextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgeryEPSS 0.4%CVE-2026-7640MEDIUMWP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode AttributeEPSS 0.3%CVE-2026-11390MEDIUMNews Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box WidgetsEPSS 0.4%CVE-2026-11802MEDIUMFoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Registration via 'registration_action' AJAX ActionEPSS 0.5%CVE-2026-15622MEDIUMpoco-ai poco-claw Workspace API workspace.py get_workspace_file authorizationEPSS 0.6%CVE-2026-15621MEDIUMmosaxiv clawlet File Tools fs_ops.go edit_file link followingEPSS 0.2%