| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-2964 | higuma web-audio-recorder-js Dynamic Config Handling WebAudioRecorder.js extend prototype pollution | higuma | web-audio-recorder-js | Medium | 5.0 | 2026-02-23 01:02:10 | Deep Dive |
| CVE-2019-25462 | Web Ofisi Rent a Car v3 SQL Injection via klima Parameter | Web-ofisi | Rent a Car | High | 8.2 | 2026-02-22 14:12:16 | Deep Dive |
| CVE-2019-25461 | Web Ofisi Platinum E-Ticaret v5 SQL Injection via ajax/productsFilterSearch | Web-ofisi | Ticaret | High | 7.5 | 2026-02-22 14:12:15 | Deep Dive |
| CVE-2019-25460 | Web Ofisi Platinum E-Ticaret v5 SQL Injection via q Parameter | Web-ofisi | Ticaret | High | 7.5 | 2026-02-22 14:12:14 | Deep Dive |
| CVE-2019-25459 | Web Ofisi Emlak V2 SQL Injection via emlak-ara.html | Web-ofisi | Emlak | Critical | 9.8 | 2026-02-22 14:12:13 | Deep Dive |
| CVE-2019-25458 | Web Ofisi Firma Rehberi v1 SQL Injection via firmalar.html | Web-ofisi | Firma Rehberi | Critical | 9.8 | 2026-02-22 14:12:12 | Deep Dive |
| CVE-2019-25457 | Web Ofisi Firma v13 SQL Injection via oz Parameter | Web-ofisi | Firma | High | 7.5 | 2026-02-22 14:12:11 | Deep Dive |
| CVE-2019-25456 | Web Ofisi Emlak v2 SQL Injection via ara Parameter | Web-ofisi | Emlak | Critical | 9.1 | 2026-02-22 14:12:10 | Deep Dive |
| CVE-2019-25455 | Web Ofisi E-Ticaret v3 SQL Injection via ara.html | Web-ofisi | Ticaret | High | 7.5 | 2026-02-22 14:12:10 | Deep Dive |
| CVE-2019-25442 | Web Wiz Forums 12.01 SQL Injection via PF Parameter | Webwiz | Web Wiz Forums | High | 7.5 | 2026-02-22 13:18:22 | Deep Dive |
| CVE-2026-27480 | Static Web Server: Timing-Based Username Enumeration in Basic Authentication | static-web-server | static-web-server | Medium | 5.3 | 2026-02-21 09:14:30 | Deep Dive |
| CVE-2025-69383 | WordPress WP shop plugin <= 2.6.1 - Local File Inclusion vulnerability | Agence web Eoxia - Montpellier | WP shop | - | - | 2026-02-20 15:46:54 | Deep Dive |
| CVE-2026-26953 | Pi-hole Web Interface has Stored HTML Injection via X-Forwarded-For Header in Active Sessions Table | pi-hole | web | Medium | 5.4 | 2026-02-19 22:50:08 | Deep Dive |
| CVE-2026-26952 | Pi-hole Web Interface has Stored HTML Injection via Local DNS Records (CNAME/Hosts) in data-tag Attribute | pi-hole | web | Medium | 5.4 | 2026-02-19 22:43:58 | Deep Dive |
| CVE-2025-9208 | Stored-XSS vulnerability discovered in OpenText WSM Management Server. | OpenText™ | Web Site Management Server | - | - | 2026-02-19 22:37:19 | Deep Dive |
| CVE-2025-13671 | Cross Site request forgery vulnerability discovered in OpenText WSM Management Server. | OpenText™ | Web Site Management Server | - | - | 2026-02-19 22:36:49 | Deep Dive |
| CVE-2025-13672 | Reflected Cross-Site Scripting discovered in OpenText WSM Management Server. | OpenText™ | Web Site Management Server | - | - | 2026-02-19 22:36:33 | Deep Dive |
| CVE-2026-2274 | Arbitrary File Read and SSRF in Google AppSheet | AppSheet | AppSheet Web (Main Server) | - | - | 2026-02-19 15:21:38 | Deep Dive |
| CVE-2026-27066 | WordPress Live sales notification for WooCommerce plugin <= 2.3.60 - Broken Access Control vulnerability | PI Web Solution | Live sales notification for WooCommerce | Medium | 5.3 | 2026-02-19 08:27:11 | Deep Dive |
| CVE-2025-13113 | Web Accessibility by accessiBe <= 2.11 - Unauthenticated Sensitive Information Exposure | accessibewp | Web Accessibility by accessiBe | Medium | 5.3 | 2026-02-19 03:25:18 | Deep Dive |