CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 29/10/2026 |
| CVE-2026-119119 | 高7.5 | Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails to cap the delay_before_return_html, mean_delay, and max_range fields of untrusted CrawlerRunConfig bodies. Unauthenticated attackers can send huge values to /crawl or /crawl/stream to hold browser p | 29/10/2026 |
| CVE-2026-119118 | 中6.5 | Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to intercept crawls because Chromium always launches with --ignore-certificate-errors. Man-in-the-middle or DNS-controlling attackers can serve forged content to the crawler and read cookies and headers sent, w | 29/10/2026 |
| CVE-2026-118673 | 中4.1 | KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0, KeePassXC browser integration encrypts authorized responses in src/browser/BrowserMessageBuilder.cpp using a fixed 1 MiB output vector even though Botan::Sodium::crypto_box_easy() writes the pla | 29/10/2026 |
| CVE-2026-118085 | 高7.1 | Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions. | 29/10/2026 |
| CVE-2026-118084 | 中6.5 | Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions. | 29/10/2026 |
| CVE-2026-118083 | 高7.5 | Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions. | 29/10/2026 |
| CVE-2026-118082 | 高8.8 | Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions. | 29/10/2026 |
| CVE-2026-118081 | 高8.8 | Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions. | 29/10/2026 |
| CVE-2026-118080 | 高8.8 | Contributor PHP Object Injection in Social Snap <= 1.5.4 versions. | 29/10/2026 |
| CVE-2026-118079 | 高7.2 | Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Object Injection.This issue affects FV Flowplayer Video Player: from n/a through 7.5.56.7212. | 29/10/2026 |
| CVE-2026-118078 | 高7.2 | Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions. | 29/10/2026 |
| CVE-2026-118077 | 高7.2 | Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions. | 29/10/2026 |
| CVE-2026-118076 | 高8.8 | Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions. | 29/10/2026 |
| CVE-2026-118075 | 高8.8 | Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions. | 29/10/2026 |
| CVE-2026-118074 | 高7.2 | Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions. | 29/10/2026 |
| CVE-2026-118073 | 高8.8 | Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. | 29/10/2026 |
| CVE-2026-116869 | 高7.2 | Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions. | 29/10/2026 |