漏洞列表 359408
CVE ID 标题 严重程度 CVSS 发布时间 受影响产品 数据源 操作
CVE-2019-25402
Comodo Dome Firewall 2.7.0 Cross-Site Scripting via login
MEDIUM 5.1 2026-02-19
Cdome Comodo Dome Firewall comodo dome_firewall
CVE NVD
CVE-2025-9953
SQLi in Database Software's Databank Accreditation Software
CRITICAL 9.8 2026-02-19
DATABASE Software Training Consulting Ltd. Databank Accreditation Software
CVE NVD
CVE-2025-8350
Authentication Bypass with Redirect in BiEticaret Software's BiEticaret CMS
CRITICAL 9.8 2026-02-19
Inrove Software and Internet Services BiEticaret CMS
CVE NVD
CVE-2025-15563
Broken Access Control results in Denial of Service in NesterSoft WorkTime
MEDIUM 5.3 2026-02-19
NesterSoft Inc. WorkTime (on-prem/cloud) nestersoft worktime
CVE NVD
CVE-2025-9062
IDOR in MeCODE Informatics' Envanty
HIGH 7.3 2026-02-19
MeCODE Informatics and Engineering Services Ltd. Envanty
CVE NVD
CVE-2025-15562
Reflected Cross-Site Scripting in NesterSoft WorkTime
MEDIUM 6.1 2026-02-19
NesterSoft Inc. WorkTime (on-prem/cloud) nestersoft worktime
CVE NVD
CVE-2025-15561
Local Privilege Escalation in NesterSoft WorkTime
HIGH 7.8 2026-02-19
NesterSoft Inc. WorkTime (on-prem/cloud) nestersoft worktime
CVE NVD
CVE-2025-15560
SQL Injection in NesterSoft WorkTime
HIGH 8.8 2026-02-19
NesterSoft Inc. WorkTime (on-prem/cloud) nestersoft worktime
CVE NVD
CVE-2025-15559
Unauthenticated OS Command Injection in NesterSoft WorkTime
CRITICAL 9.8 2026-02-19
NesterSoft Inc. WorkTime (on-prem/cloud) nestersoft worktime
CVE NVD
CVE-2025-13590
Authenticated arbitrary file upload via a System REST API requiring administrator permission.
CRITICAL 9.1 2026-02-19
WSO2 WSO2 API Manager WSO2 WSO2 API Control Plane +14个
CVE NVD
CVE-2025-12107
Potential authenticated Server-Side Template Injection (SSTI) vulnerability.
CRITICAL 10.0 2026-02-19
WSO2 WSO2 Identity Server wso2 identity_server
CVE NVD
CVE-2026-1219
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 4.0 - 5.10 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure
MEDIUM 5.3 2026-02-19
sonaar MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
CVE NVD
CVE-2026-2718
Dealia <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block Attributes
MEDIUM 6.4 2026-02-19
dealia Dealia – Request a quote
CVE NVD
CVE-2026-2716
Client Testimonial Slider <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Testimonial Heading' Setting
MEDIUM 4.4 2026-02-19
amu02aftab Client Testimonial Slider
CVE NVD
CVE-2026-1461
Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values
MEDIUM 6.5 2026-02-19
wpinsider-1 Simple Membership
CVE NVD
CVE-2026-22267
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignm...
HIGH 8.1 2026-02-19
Dell PowerProtect Data Manager dell powerprotect_data_manager
CVE NVD
CVE-2026-22268
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Incorrect Privilege Assignm...
MEDIUM 6.3 2026-02-19
Dell PowerProtect Data Manager dell powerprotect_data_manager
CVE NVD
CVE-2026-22266
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of So...
MEDIUM 4.7 2026-02-19
Dell PowerProtect Data Manager dell powerprotect_data_manager
CVE NVD
CVE-2026-22269
Dell PowerProtect Data Manager, version(s) prior to 19.22, contain(s) an Improper Verification of So...
MEDIUM 4.7 2026-02-19
Dell PowerProtect Data Manager dell powerprotect_data_manager
CVE NVD
CVE-2025-41023
Authentication bypass in AutoGPT de Thesamur
MEDIUM 6.9 2026-02-19
Thesamur AutoGPT
CVE NVD