Web Application

🛡 Vulnérabilités associées 283

	ID	Titre	Gravité	Détecté
	CVE-2026-34621 KEV	[KEV] Vulnérabilité dans Adobe acrobat-and-reader (CVE-2026-34621)	High	il y a 4 mois
	CVE-2026-4326	The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activate...	High	il y a 4 mois
	CVE-2026-3243	The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up to, and including, 1....	High	il y a 4 mois
	CVE-2026-35209	defu is software that allows uers to assign default properties recursively. Prior to version 6.1.5, applications that pass unsanitized user input (e.g. parsed JSON request bodies, database records, or...	High	il y a 4 mois
	CVE-2026-1233	The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...	High	il y a 4 mois
	CVE-2026-3445	The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass i...	High	il y a 4 mois
	CVE-2026-4896	The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclu...	High	il y a 4 mois
	CVE-2026-4350	The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1. This is due to the `PMCS::action_handler()` method proce...	High	il y a 4 mois
	CVE-2026-3502 KEV	[KEV] Vulnérabilité dans Trueconf client (CVE-2026-3502)	High	il y a 4 mois
	CVE-2026-33017 KEV	[KEV] Vulnérabilité dans langflow (CVE-2026-33017)	Critical	il y a 5 mois
	CVE-2026-1618	Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc....	High	il y a 6 mois
	CVE-2020-37210	SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste i...	High	il y a 6 mois
	CVE-2020-37211	SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character...	High	il y a 6 mois
	CVE-2020-37212	SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste...	High	il y a 6 mois
	CVE-2026-1819	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')...	High	il y a 6 mois
	CVE-2025-2155	Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade...	High	il y a 8 mois
	CVE-2025-64666	Vulnérabilité dans microsoft (CVE-2025-64666)	High	il y a 8 mois
	CVE-2025-54236 KEV	[KEV] Vulnérabilité dans Adobe commerce (CVE-2025-54236)	Critical	il y a 10 mois
	CVE-2025-2411	Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano...	High	il y a 11 mois
	CVE-2025-2413	Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor...	High	il y a 11 mois
	CVE-2025-0610	Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request...	High	il y a 11 mois
	CVE-2025-53786	Contournement d'authentification dans microsoft (CVE-2025-53786)	High	il y a 1 an
	CVE-2024-5971	A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not s...	High	il y a 2 ans
	CVE-2024-27289	pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the following conditions are met: the non-default simple protocol is used; a placeholder for...	High	il y a 2 ans
	CVE-2022-27224	An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated...	High	il y a 4 ans
	CVE-2021-41164	CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The...	High	il y a 4 ans
	CVE-2020-7564	Vulnérabilité dans schneider-electric (CVE-2020-7564)	High	il y a 5 ans
	CVE-2020-11111	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, an...	High	il y a 6 ans
	CVE-2020-11112	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/common...	High	il y a 6 ans
	CVE-2020-11113	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).	High	il y a 6 ans