تغذية مباشرة من NVD & CISA

قاعدة بيانات الثغرات الأمنية CVE Intelligence

بيانات CVE من NVD مع إثراء KEV من CISA وترجمة عربية. المحتوى مبني على المصادر الرسمية فقط.

الثغرات المستغلة فعليًا فقط

إعادة ضبط

عرض صفحة 13 من 27 (1330 ثغرة)

CVE ID	الشدة	CVSS	KEV مستغلة؟	تاريخ النشر	الملخص
CVE-2020-37196	Medium	4,6	لا	2026-02-12	Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an …
CVE-2020-37195	Medium	4,6	لا	2026-02-12	BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the appl…
CVE-2020-37194	Medium	4,6	لا	2026-02-12	Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overly …
CVE-2020-37193	Medium	4,6	لا	2026-02-12	ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing malicious…
CVE-2020-37192	Medium	6,7	لا	2026-02-12	MSN Password Recovery 1.30 contains an XML external entity injection vulnerability that allows attackers to read local system files through…
CVE-2020-37191	Medium	4,6	لا	2026-02-12	Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to crash the applicati…
CVE-2020-37190	Medium	4,6	لا	2026-02-12	Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by ove…
CVE-2020-37189	Medium	4,6	لا	2026-02-12	TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the applica…
CVE-2020-37188	Medium	4,6	لا	2026-02-12	SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the applic…
CVE-2020-37187	Medium	4,6	لا	2026-02-12	SpotDialup 1.6.7 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the applica…
CVE-2020-37186	Critical	9,3	لا	2026-02-12	Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configu…
CVE-2020-37185	Medium	4,6	لا	2026-02-12	Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Nam…
CVE-2020-37184	High	8,4	لا	2026-02-12	Allok Video Converter 4.6.1217 contains a stack overflow vulnerability in the License Name input field that allows attackers to execute arb…
CVE-2020-37183	High	8,4	لا	2026-02-12	Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by…
CVE-2020-37182	High	8,7	لا	2026-02-12	Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sendin…
CVE-2020-37181	Medium	6,7	لا	2026-02-12	Torrent FLV Converter 1.51 Build 117 contains a stack overflow vulnerability that allows attackers to overwrite Structured Exception Handle…
CVE-2020-37180	Medium	4,6	لا	2026-02-12	GTalk Password Finder 2.2.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overs…
CVE-2020-37179	Medium	4,6	لا	2026-02-12	APKF Product Key Finder 2.5.8.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing th…
CVE-2020-37178	Medium	4,6	لا	2026-02-12	KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling. Attackers can trig…
CVE-2020-37177	Medium	6,7	لا	2026-02-12	BOOTP Turbo 2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Structured Exc…
CVE-2020-37176	High	8,4	لا	2026-02-12	Torrent 3GP Converter 1.51 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structure…
CVE-2020-37175	Medium	4,6	لا	2026-02-12	P2PWIFICAM2 for iOS 10.4.1 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the Ca…
CVE-2020-37173	High	8,7	لا	2026-02-12	AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsF…
CVE-2020-37172	High	8,5	لا	2026-02-12	AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the pas…
CVE-2020-37158	High	8,5	لا	2026-02-12	AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the pas…
CVE-2020-37156	Medium	6,9	لا	2026-02-12	BloodX 1.0 contains an authentication bypass vulnerability in login.php that allows attackers to access the dashboard without valid credent…
CVE-2020-37153	High	7,7	لا	2026-02-12	ASTPP 4.0.1 contains multiple vulnerabilities including cross-site scripting and command injection in SIP device configuration and plugin m…
CVE-2020-37104	High	8,7	لا	2026-02-12	ASTPP 4.0.1 contains an information disclosure vulnerability that allows unauthenticated attackers to download database backup files by pre…
CVE-2019-25313	Medium	5,1	لا	2026-02-12	FlexNet Publisher 11.12.1 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts …
CVE-2024-50618	Medium	4,3	لا	2026-02-11	A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CIPAce before 9.17 allows attackers to by…
CVE-2024-26480	High	7,5	لا	2026-02-11	An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the admin parameter.
CVE-2024-26479	Medium	5,3	لا	2026-02-11	An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the Command execution function.
CVE-2024-26478	Medium	5,3	لا	2026-02-11	An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the /api/users endpoint.
CVE-2024-26477	High	7,5	لا	2026-02-11	An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the api parameter of the oauth…
CVE-2026-2323	Medium	4,3	لا	2026-02-11	Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a cr…
CVE-2026-2322	Medium	5,4	لا	2026-02-11	Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage…
CVE-2026-2321	High	8,8	لا	2026-02-11	Use after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI ges…
CVE-2026-2320	Medium	6,5	لا	2026-02-11	Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage…
CVE-2026-2319	High	7,5	لا	2026-02-11	Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures a…
CVE-2026-2318	Medium	6,5	لا	2026-02-11	Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to …
CVE-2026-2317	Medium	6,5	لا	2026-02-11	Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cross-origin data via a…
CVE-2026-2316	Medium	6,5	لا	2026-02-11	Insufficient policy enforcement in Frames in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a cr…
CVE-2026-2315	High	8,8	لا	2026-02-11	Inappropriate implementation in WebGPU in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially perform out of boun…
CVE-2026-2314	High	8,8	لا	2026-02-11	Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via…
CVE-2026-2313	High	8,8	لا	2026-02-11	Use after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafte…
CVE-2025-70297	Medium	6,1	لا	2026-02-11	A stored cross-site scripting (XSS) vulnerability in the recipe asset upload and media serving component in Mealie 3.3.1 allows remote auth…
CVE-2025-70296	Medium	5,4	لا	2026-02-11	A stored HTML injection vulnerability in the Recipe Notes rendering component in Mealie 3.3.1 allows remote authenticated users to inject a…
CVE-2025-69873	High	7,5	لا	2026-02-11	ajv (Another JSON Schema Validator) through version 8.17.1 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data opt…
CVE-2025-69872	Critical	9,8	لا	2026-02-11	DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache dire…
CVE-2025-69871	High	8,1	لا	2026-02-11	A race condition vulnerability exists in MedusaJS Medusa v2.12.2 and earlier in the registerUsage() function of the promotion module. The f…