Vulnérabilités

Aggrégat CVE / GHSA / KEV / OSV — filtrage par étiquette et catégorie.

KEV

Catégories

Tous 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Groupes d'étiquettes

Tous 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Étiquettes populaires (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtre actif : Catégorie : enterprise-saas Effacer

ID	Titre	Gravité	Étiquettes	Détecté
CVE-2026-79938	Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication... Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication...	High	Cwe 287 Dell Improper Authentication	il y a 2 jours
CVE-2026-19851	A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17... A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17...	High	Cwe 1393 Authentication Bypass	il y a 4 jours
CVE-2026-71506	Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API... Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API...	High	Cwe 863 Remote Code Execution Enterprise Saas	il y a 4 jours
CVE-2026-40877	Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This i... Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This issue has been fixed in version 3.2.3.	High	PHP Remote Code Execution Cwe 94 Cwe 502	il y a 4 jours
CVE-2026-78203	Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap... Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap...	High	Cwe 639 Ghostwriter Unauthorized Access Information Disclosure	il y a 5 jours
CVE-2026-30866	Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensitive via sniffed url. This issue has been fixed in version 3.2.3. Combodo iTop is a web based IT service management tool. Prior to 3.2.3, unauthenticated users can access uploaded sensitive via sniffed url. This issue has been fixed in version 3.2.3.	High	Cwe 200 Cwe 306 Web Application Authentication Bypass	il y a 1 semaine
CVE-2026-54998	Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate... Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate...	High	Cwe 863 Microsoft Exchange Authentication Bypass +2	il y a 1 mois
CVE-2026-57955	SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers... SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers...	High	SQL Injection Cwe 89 Sql	il y a 2 mois
CVE-2026-53857	OpenClaw: Zalo allowFrom could bind to mutable display names OpenClaw: Zalo allowFrom could bind to mutable display names	High	Cwe 290 Policy Enforcement Remote Code Execution Web Application +2	il y a 2 mois
CVE-2026-48305	Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write... Substance3D - Sampler versions 6.0.0 and earlier are affected by an out-of-bounds write...	High	Cwe 787 Adobe Remote Code Execution Substance 3D Sampler	il y a 2 mois
CVE-2026-11462	A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. This... A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. This...	High	PHP Cwe 266 Cwe 285 Remote Code Execution	il y a 2 mois
CVE-2026-7313	CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from... CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from...	High	Cwe 522 Remote Code Execution PHP Progress +1	il y a 2 mois
CVE-2026-47740	shopper/framework: Authorization bypass in multiple Livewire admin components shopper/framework: Authorization bypass in multiple Livewire admin components	High	Cwe 285 Cwe 862 Web Application	il y a 2 mois
CVE-2026-45206	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Windows Privilege Escalation Trendmicro +1	il y a 3 mois
CVE-2026-34927	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation Trendmicro Apex One	il y a 3 mois
CVE-2026-2740	Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and... Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and...	High	Remote Code Execution Cwe 77	il y a 3 mois
CVE-2026-22069	A local privilege escalation vulnerability exists in O+ Connect because it fails to validate the... A local privilege escalation vulnerability exists in O+ Connect because it fails to validate the...	High	Privilege Escalation Cwe 266	il y a 3 mois
CVE-2026-42354	Vulnérabilité dans sso (CVE-2026-42354) vulnérabilité dans sso (CVE-2026-42354). Des informations confidentielles peuvent être exposées. Exploitable via ``Moved``.	Critical	Cwe 290 Authentication Bypass Sso SAML +10	il y a 3 mois
CVE-2026-44335	SSRF (Falsification de requête côté serveur) dans ssrf (CVE-2026-44335) SSRF dans ssrf (CVE-2026-44335). L'exploitation peut entraîner la prise de contrôle totale du système. Exploitable via ``requests``. Atténuation : mise à jour vers `>= 1.6.32` ou plus.	Critical	Server-Side Request Forgery Cwe 918 Praison Praisonaiagents +8	il y a 3 mois
CVE-2026-33823	Vulnérabilité dans microsoft (CVE-2026-33823) vulnérabilité dans microsoft (CVE-2026-33823). Des informations confidentielles peuvent être exposées.	Critical	Cwe 285 Microsoft Teams Authentication Bypass +11	il y a 3 mois
CVE-2026-6973 KEV	[KEV] Vulnérabilité dans Ivanti endpoint-manager-mobile-epmm (CVE-2026-6973) vulnérabilité dans Ivanti endpoint-manager-mobile-epmm (CVE-2026-6973). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.	High	Ivanti Endpoint Manager Mobile Epmm Cwe 20 Remote Code Execution +9	il y a 3 mois
CVE-2026-38431	Injection de code dans frappe (CVE-2026-38431) injection de code dans frappe (CVE-2026-38431). L'exploitation peut entraîner la prise de contrôle totale du système.	Critical	Cwe 94 Frappe Erpnext Server-Side Template Injection +15	il y a 3 mois
CVE-2024-7399 KEV	[KEV] Traversée de chemin dans Samsung magicinfo-9-server (CVE-2024-7399) traversée de chemin dans Samsung magicinfo-9-server (CVE-2024-7399). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.	High	Samsung Magicinfo 9 Server Cwe 22 Cwe 434 +9	il y a 4 mois
CVE-2025-48700 KEV	[KEV] XSS (Cross-Site Scripting) dans Synacor zimbra-collaboration-suite-zcs (CVE-2025-48700) XSS dans Synacor zimbra-collaboration-suite-zcs (CVE-2025-48700). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.	High	Synacor Zimbra Collaboration Suite Zcs Cwe 79 Cross-Site Scripting +5	il y a 4 mois
CVE-2024-27199 KEV	[KEV] Vulnérabilité dans Jetbrains teamcity (CVE-2024-27199) vulnérabilité dans Jetbrains teamcity (CVE-2024-27199). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.	High	Jetbrains Teamcity Cwe 23 Path Traversal +9	il y a 4 mois
CVE-2026-34197 KEV	[KEV] Vulnérabilité dans Apache activemq (CVE-2026-34197) vulnérabilité dans Apache activemq (CVE-2026-34197). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.	High	Apache Activemq Cwe 20 Cwe 94 +11	il y a 4 mois
CVE-2020-9715 KEV	[KEV] Use-After-Free dans Adobe acrobat (CVE-2020-9715) vulnérabilité dans Adobe acrobat (CVE-2020-9715). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.	High	Adobe Acrobat Cwe 416 Remote Code Execution +7	il y a 4 mois
CVE-2026-1340 KEV	[KEV] Injection de code dans Ivanti endpoint-manager-mobile-epmm (CVE-2026-1340) injection de code dans Ivanti endpoint-manager-mobile-epmm (CVE-2026-1340). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.	High	Ivanti Endpoint Manager Mobile Epmm Cwe 94 Remote Code Execution	il y a 4 mois
CVE-2026-35616 KEV	[KEV] Vulnérabilité dans Fortinet forticlient-ems (CVE-2026-35616) vulnérabilité dans Fortinet forticlient-ems (CVE-2026-35616). L'exploitation peut entraîner la prise de contrôle totale du système. Inscrit au CISA KEV — exploitation active confirmée.	Critical	Fortinet Forticlient Ems Cwe 284 Remote Code Execution +1	il y a 4 mois
CVE-2025-59249	Vulnérabilité dans microsoft (CVE-2025-59249) vulnérabilité dans microsoft (CVE-2025-59249). L'exploitation peut entraîner la prise de contrôle totale du système.	High	Cwe 1390 Microsoft Exchange Server Exchange Server Subscription Edition +2	il y a 10 mois
CVE-2025-59248	Vulnérabilité dans microsoft (CVE-2025-59248) vulnérabilité dans microsoft (CVE-2025-59248). Des informations confidentielles peuvent être exposées.	High	Cwe 20 Microsoft Exchange Server Exchange Server Subscription Edition +2	il y a 10 mois
CVE-2025-53782	Vulnérabilité dans microsoft (CVE-2025-53782) vulnérabilité dans microsoft (CVE-2025-53782). L'exploitation peut entraîner la prise de contrôle totale du système.	High	Cwe 303 Microsoft Exchange Server Exchange Server Subscription Edition +2	il y a 10 mois
CVE-2025-33051	Divulgation d'information dans microsoft (CVE-2025-33051) vulnérabilité dans microsoft (CVE-2025-33051). Des informations confidentielles peuvent être exposées.	High	Cwe 200 Microsoft Exchange Server Exchange Server Subscription Edition +1	il y a 1 an
CVE-2023-4664	Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege... Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege...	High	Privilege Escalation Cwe 276 Adobe Connect	il y a 2 ans
CVE-2023-4665	Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows... Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows...	High	Privilege Escalation Cwe 279 Cwe 732 Adobe +1	il y a 2 ans
CVE-2017-1371	Builder tools running in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute Builder tool actions they do not have access... Builder tools running in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute Builder tool actions they do not have access to. IBM X-Force ID: 126864.	High	Ibm Tririga Application Platform Authentication Bypass Cwe 284	il y a 9 ans
CVE-2017-1373	Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force I... Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866.	High	Ibm Tririga Application Platform Remote Code Execution Cwe 20	il y a 9 ans

Vulnérabilités

🍪 À propos des cookies