Busca de CVEs

395.451 resultados
CVE-2026-65687CRITICALBold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via SVG ProcessingEPSS 0.9%CVE-2026-65914MEDIUMDOMPurify before 3.3.2 Mutation XSS via Re-ContextualizationEPSS 0.2%CVE-2026-65913MEDIUMDOMPurify before 3.3.2 Prototype Pollution via USE_PROFILESEPSS 0.3%CVE-2026-65912MEDIUMDOMPurify before 3.3.2 URI Validation Bypass via ADD_ATTREPSS 0.2%CVE-2026-65911MEDIUMDOMPurify before 3.4.0 XSS via ADD_ATTR/ADD_TAGS State LeakageEPSS 0.2%CVE-2026-65904LOWDOMPurify through 3.3.3 Cross-Site Scripting via IN_PLACE modeEPSS 0.2%CVE-2026-65903MEDIUMDOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGSEPSS 0.3%CVE-2026-65902MEDIUMDOMPurify before 3.4.7 Hook Mutation Pollution via allowedTagsEPSS 0.2%CVE-2026-65901MEDIUMDOMPurify 3.4.6 Cross-Site Scripting via IN_PLACE nodeNameEPSS 0.2%CVE-2026-65900MEDIUMDOMPurify before 3.4.8 Template Expression Injection via RETURN_DOMEPSS 0.2%CVE-2026-65899MEDIUMDOMPurify before 3.4.9 Trusted Types Policy State ContaminationEPSS 0.3%CVE-2026-65898MEDIUMDOMPurify before 3.4.11 Permanent Attribute Allowlist Pollution via setConfigEPSS 0.2%CVE-2026-14257HIGHbrace-expansion DoS via unbounded expansion length causing an out-of-memory process crashEPSS 0.6%CVE-2026-15037LOWXML injection vulnerability in QDom comment, CDATA and processing-instruction serializationEPSS 0.3%CVE-2026-65907CRITICALIn JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possibleEPSS 0.4%CVE-2026-65908HIGHIn JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project openEPSS 0.2%CVE-2026-65906HIGHIn JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possibleEPSS 0.5%CVE-2026-65475MEDIUMWordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-61945MEDIUMWordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerabilityEPSS 0.4%CVE-2026-57626HIGHWordPress MailPoet plugin 5.30.0-5.33.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%