Vulnérabilités
Aggrégat CVE / GHSA / KEV / OSV — filtrage par étiquette et catégorie.
| ID | Titre | |
|---|---|---|
| CVE-2026-20128 KEV |
|
[KEV] Vulnérabilité dans Cisco catalyst-sd-wan-manager (CVE-2026-20128)
vulnérabilité dans Cisco catalyst-sd-wan-manager (CVE-2026-20128). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2023-27351 KEV |
|
[KEV] Contournement d'authentification dans Papercut ngmf (CVE-2023-27351)
contournement d'authentification dans Papercut ngmf (CVE-2023-27351). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2026-20133 KEV |
|
[KEV] Divulgation d'information dans Cisco catalyst-sd-wan-manager (CVE-2026-20133)
vulnérabilité dans Cisco catalyst-sd-wan-manager (CVE-2026-20133). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2026-20122 KEV |
|
[KEV] Vulnérabilité dans Cisco catalyst-sd-wan-manger (CVE-2026-20122)
vulnérabilité dans Cisco catalyst-sd-wan-manger (CVE-2026-20122). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2026-40170 |
|
ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buf...
ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transpo...
|
| CVE-2026-41035 |
|
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort...
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort...
|
| CVE-2026-34197 KEV |
|
[KEV] Vulnérabilité dans Apache activemq (CVE-2026-34197)
vulnérabilité dans Apache activemq (CVE-2026-34197). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2026-21643 KEV |
|
[KEV] Injection SQL dans Fortinet forticlient-ems (CVE-2026-21643)
injection SQL dans Fortinet forticlient-ems (CVE-2026-21643). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2023-21529 KEV |
|
[KEV] Désérialisation non sécurisée dans Microsoft exchange-server (CVE-2023-21529)
vulnérabilité dans Microsoft exchange-server (CVE-2023-21529). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2026-5612 |
|
A vulnerability was determined in Belkin F9K1015 1.00.10. This vulnerability affects the function formWlEncrypt of the file /goform/formWlEncrypt. Executing a manipulation of the argument webpage can...
A vulnerability was determined in Belkin F9K1015 1.00.10. This vulnerability affects the function formWlEncrypt of the file /goform/formWlEncrypt. Executing a manipulation of the argument webpage can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been publi...
|
| CVE-2026-5604 |
|
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Perfor...
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Performing a manipulation of the argument standard results in stack-based buffer overflow. Remote exploita...
|
| CVE-2026-3055 KEV |
|
[KEV] Lecture hors limites dans Citrix netscaler (CVE-2026-3055)
vulnérabilité dans Citrix netscaler (CVE-2026-3055). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2025-53521 KEV |
|
[KEV] Vulnérabilité dans F5 big-ip (CVE-2025-53521)
vulnérabilité dans F5 big-ip (CVE-2025-53521). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2022-20759 |
|
A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authen...
A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, but unprivileged, remote attacker to elevate privileges to level 15. This vulnerability is...
|
| CVE-2022-20773 |
|
A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance...
A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance...
|
| CVE-2021-25667 |
|
A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE S...
A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC...
|
| CVE-2021-22703 |
|
Vulnérabilité dans schneider-electric (CVE-2021-22703)
vulnérabilité dans schneider-electric (CVE-2021-22703). Des informations confidentielles peuvent être exposées.
|
| CVE-2021-22702 |
|
Vulnérabilité dans schneider-electric (CVE-2021-22702)
vulnérabilité dans schneider-electric (CVE-2021-22702). Des informations confidentielles peuvent être exposées.
|
| CVE-2020-7563 |
|
Écriture hors limites dans schneider-electric (CVE-2020-7563)
écriture hors limites dans schneider-electric (CVE-2020-7563). L'exploitation peut entraîner la prise de contrôle totale du système.
|
| CVE-2020-7562 |
|
Lecture hors limites dans schneider-electric (CVE-2020-7562)
vulnérabilité dans schneider-electric (CVE-2020-7562). Des informations confidentielles peuvent être exposées.
|
| CVE-2019-12675 |
|
Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and...
Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insuff...
|
| CVE-2016-10401 |
|
ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known (or a non-root default account exists w...
ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known (or a non-root default account exists within an ISP's deployment of these devices).
|
| CVE-2017-2273 |
|
Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hijack the authentication of administrators...
Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
|
| CVE-2015-6564 |
|
Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...
Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...
|