CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 严重9.8 |
Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions. |
| 29/10/2026 |
| CVE-2026-62008 | 严重9.8 | Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions. | 29/10/2026 |
| CVE-2026-62006 | 严重9.8 | Unauthenticated PHP Object Injection in Nuts <= 1.12 versions. | 29/10/2026 |
| CVE-2026-62005 | 严重9.8 | Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions. | 29/10/2026 |
| CVE-2026-62004 | 严重9.8 | Unauthenticated PHP Object Injection in Motorix <= 1.11 versions. | 29/10/2026 |
| CVE-2026-62003 | 严重9.8 | Unauthenticated PHP Object Injection in Mission <= 1.22 versions. | 29/10/2026 |
| CVE-2026-62002 | 严重9.8 | Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions. | 29/10/2026 |
| CVE-2026-62001 | 严重9.8 | Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions. | 29/10/2026 |
| CVE-2026-61998 | 严重9.8 | Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions. | 29/10/2026 |
| CVE-2026-61997 | 严重9.8 | Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions. | 29/10/2026 |
| CVE-2026-61996 | 高危8.5 | Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions. | 29/10/2026 |
| CVE-2026-61995 | 高危7.1 | Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions. | 29/10/2026 |
| CVE-2026-61993 | 高危7.1 | Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions. | 29/10/2026 |
| CVE-2026-61992 | 严重9.8 | Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions. | 29/10/2026 |
| CVE-2026-61991 | 严重10.0 | Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions. | 29/10/2026 |