آخرین آسیب‌پذیری‌ها

Symfony: X.509 Authentication Impersonation via DN Value Injection (incomplete fix for CVE-2026-45063)

Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework

WordPress Noptin plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability

WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability

WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability

Buffer overflow in SAML authentication post-back URL handling in libsnowflakeclient and Snowflake PHP PDO Driver

Mobile builder <= 1.4.2 - Authenticated (Subscriber+) Privilege Escalation to wcfm-profile-settings REST Route 'key'/'data' Parameters

Remove Google Fonts <= 1.7 - Unauthenticated Stored Cross-Site Scripting via Comment Field via Regex-Mangled Output Buffer

Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers

Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption

Apache OpenOffice: Local file inclusion via GStreamer plugin

Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files

Apache OpenOffice: Remote document loaded without prompt, possibiy leaking environment variables

Apache OpenOffice: Out of bounds memory access during WMF import

Apache OpenOffice: Stack overflow in CFF hint handling

Apache OpenOffice: Local file inclusion via SQL provider and flat file database references

Apache OpenOffice: Out-of-bounds write when importing encrypted PDF files

Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability

Apache OpenOffice: Heap out-of-bounds write in WW8 PLCF reader

Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer

Apache OpenOffice: Carefully crafted documents could display different data when opened with different programs, instead of being reported as corrupt.

Apache ZooKeeper: Denial of service through unbounded memory allocation in multiRead request handling

Apache ZooKeeper: Unbounded recursion in snapshot serialization allows a client to render the server unrecoverable

Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply thread

Apache ZooKeeper: SASL authorization bypass on the client port through a client-supplied authorization ID