🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-118461 HIGH The shared client accepts caller-controlled doctor identifiers for read and write operations without requiring authentication or authorization credent... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-118460 HIGH Embedded private keys protected by a shared password can be used to sign practitioner assertions for arbitrary practitioner identifiers, enabling unau... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-118459 MEDIUM A time-derived emergency password can be derived from publicly available application code, enabling authentication without legitimate credentials. | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-118458 HIGH The shared AIS login routing selects a production-shipped test DAO and plaintext comparison for the H and V application codes, accepting fixed adminis... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-118450 MEDIUM Venere is installed outside Program Files and loads/registers unsigned components from locations where an unprivileged user may create files. | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-112172 HIGH CGM XDent and XMedical expose PHP synchronization endpoints that allow unauthenticated attackers to manipulate session variables and execute arbitrary... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123779 MEDIUM Direct Request ('Forced Browsing') vulnerability in Apache Axis2/Java. The exposeServiceMetadata service parameter was enforced only on the ... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123766 MEDIUM Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in the OpenAPI module of Apache Axis2/Java. The Swagg... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123770 HIGH Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java. The multipart/form-data and application/x-www-form-urlencoded... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123476 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fifu.app Featured Image from URL featu... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123475 HIGH Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configure... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123460 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress File Upload wp-file... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-122666 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kitae Park Mang Board WP mangboard all... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-122665 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kitae Park Mang Board WP mangboard all... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123753 CRITICAL Server-Side Request Forgery (SSRF) vulnerability in Apache Axis2/Java. An unauthenticated caller could supply a non-anonymous WS-Addressing wsa:ReplyT... | CRITICAL | ????? | ????? | NVD | 4 days ago |
| CVE-2026-122661 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Directorist directorist allows S... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121782 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Co... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121722 HIGH Missing Authorization vulnerability in WP E-Signature Formidable Forms Signature Online Contract Automation forms-signature-formidable-online-contract... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121570 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill RSVP and Event Management rsv... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-120855 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TemplateInvaders TI WooCommerce Wishli... | MEDIUM | ????? | ????? | NVD | 4 days ago |