CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 29/10/2026 |
| CVE-2026-66911 | 보통5.3 | Zimbra is vulnerable to stored cross-site scripting (XSS) via the Content-Location MIME header in email attachments. Due to lack of sanitization of the Content-Location header, an attacker can set it to a javascript: URI. An unauthenticated remote attacker can send a crafted email to a victim; when the victim opens the | 29/10/2026 |
| CVE-2026-62131 | 심각9.8 | Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions. | 29/10/2026 |
| CVE-2026-62018 | 심각9.8 | Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions. | 29/10/2026 |
| CVE-2026-62017 | 심각9.8 | Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions. | 29/10/2026 |
| CVE-2026-62016 | 심각9.8 | Unauthenticated PHP Object Injection in Gamic <= 1.19 versions. | 29/10/2026 |
| CVE-2026-62015 | 심각9.8 | Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions. | 29/10/2026 |
| CVE-2026-62014 | 심각9.8 | Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions. | 29/10/2026 |
| CVE-2026-62013 | 심각9.8 | Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions. | 29/10/2026 |
| CVE-2026-62012 | 심각9.8 | Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions. | 29/10/2026 |
| CVE-2026-62011 | 심각9.8 | Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions. | 29/10/2026 |
| CVE-2026-62010 | 심각9.8 | Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions. | 29/10/2026 |
| CVE-2026-62009 | 심각9.8 | Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions. | 29/10/2026 |
| CVE-2026-62008 | 심각9.8 | Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions. | 29/10/2026 |
| CVE-2026-62006 | 심각9.8 | Unauthenticated PHP Object Injection in Nuts <= 1.12 versions. | 29/10/2026 |
| CVE-2026-62005 | 심각9.8 | Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions. | 29/10/2026 |
| CVE-2026-62004 | 심각9.8 | Unauthenticated PHP Object Injection in Motorix <= 1.11 versions. | 29/10/2026 |