Vulnérabilités

Aggrégat CVE / GHSA / KEV / OSV — filtrage par étiquette et catégorie.

KEV

Catégories

Tous 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Groupes d'étiquettes

Tous 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Étiquettes populaires (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtre actif : Catégorie : os Groupe : attack-types Effacer

ID	Titre	Gravité	Étiquettes	Détecté
CVE-2026-82474	Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in... Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in...	High	Cwe 693 Linux Os Privilege Escalation	il y a 2 heures
CVE-2026-74770	Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special... Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special...	High	Cwe 78 Dell Command Injection Powerprotect One	il y a 2 jours
CVE-2015-3246 KEV	libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the... libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the...	Medium	Linux Race Condition Privilege Escalation Denial of Service +7	il y a 3 jours
CVE-2015-5287 KEV	The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local... The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local...	High	Privilege Escalation Symlink Attack Red Hat Eol +11	il y a 3 jours
CVE-2022-0995 KEV	An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event... An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event...	High	Linux Buffer Overflow Cwe 787 Privilege Escalation +27	il y a 3 jours
CVE-2026-68062	SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this... SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this...	High	Path Traversal Cwe 22 Windows Remote Code Execution	il y a 4 jours
CVE-2026-68959	SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this... SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this...	High	Path Traversal Cwe 25 Windows	il y a 4 jours
CVE-2026-61419	Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability.... Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability....	High	Cwe 284 Privilege Escalation Dell	il y a 4 jours
CVE-2026-17223	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...	High	Cwe 787 Ibm Buffer Overflow Remote Code Execution +1	il y a 2 semaines
CVE-2026-16975	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...	High	Cwe 787 Buffer Overflow Remote Code Execution Ibm +1	il y a 2 semaines
CVE-2026-16987	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to...	High	Cwe 73 Ibm Privilege Escalation I	il y a 2 semaines
CVE-2026-17029	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out...	High	Cwe 787 Buffer Overflow Ibm I Ibm +1	il y a 2 semaines
CVE-2026-16815	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and...	High	Denial of Service Cwe 787 Buffer Overflow Denial Of Service +2	il y a 2 semaines
CVE-2026-16722	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized...	High	Cwe 269 Privilege Escalation Ibm I	il y a 2 semaines
CVE-2026-16674	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...	High	Cwe 426 Ibm Os Remote Code Execution +1	il y a 2 semaines
CVE-2026-44106	A privilege escalation vulnerability in the init-script for user-applications allows a low... A privilege escalation vulnerability in the init-script for user-applications allows a low...	High	Privilege Escalation Cwe 78	il y a 4 semaines
CVE-2026-44099	A privilege escalation vulnerability in the system configuration allows a low-privileged local... A privilege escalation vulnerability in the system configuration allows a low-privileged local...	High	Privilege Escalation Cwe 78	il y a 4 semaines
CVE-2026-44093	A local privilege escalation vulnerability in the init-script for user-applications allows a low... A local privilege escalation vulnerability in the init-script for user-applications allows a low...	High	Privilege Escalation Cwe 78	il y a 4 semaines
CVE-2026-44096	A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute... A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute...	High	Privilege Escalation Cwe 78 Linux	il y a 4 semaines
CVE-2026-45313	Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.17.6, GuiServer::WndHookRegisterSlave in Sandboxie/core/svc/GuiServer.cpp stores attacker-supplied hthread and... Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.17.6, GuiServer::WndHookRegisterSlave in Sandboxie/core/svc/GuiServer.cpp stores attacker-supplied hthread and hproc fields from a GUI_WND_HOOK_REGISTER request without validating that the thread belongs to the...	High	C++ Cwe 284 Windows Remote Code Execution	il y a 1 mois
CVE-2026-50656	Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in... Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in...	High	Cwe 59 Windows Privilege Escalation Microsoft +1	il y a 2 mois
CVE-2025-31272	The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app... The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app...	High	Cwe 269 macOS Privilege Escalation Apple	il y a 2 mois
CVE-2026-45207	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation Trendmicro Apex One	il y a 3 mois
CVE-2026-34930	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation Trendmicro Apex One	il y a 3 mois
CVE-2026-34929	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation Trendmicro Apex One	il y a 3 mois
CVE-2026-34928	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation Os Trendmicro +1	il y a 3 mois
CVE-2026-27648	in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre... in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre...	High	Cwe 787 Remote Code Execution	il y a 3 mois
CVE-2026-25781	in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered. in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered.	High	Denial of Service Cwe 787 Openharmony	il y a 3 mois
CVE-2026-24792	in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre... in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre...	High	Cwe 364 Openharmony Remote Code Execution	il y a 3 mois
CVE-2026-41702	VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an... VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an...	High	Cwe 367 Vmware Privilege Escalation Fusion	il y a 3 mois
CVE-2024-51092	Injection de commande OS dans command-injection (CVE-2024-51092) injection de commande OS dans command-injection (CVE-2024-51092). Des informations confidentielles peuvent être exposées. Exploitable via ``version_netsnmp``.	Critical	PHP Cwe 78 Authentication Bypass Command Injection +12	il y a 3 mois
CVE-2026-43944	Vulnérabilité dans electerm (CVE-2026-43944) vulnérabilité dans electerm (CVE-2026-43944). L'exploitation peut entraîner la prise de contrôle totale du système. Exploitable via ``opts``. Atténuation : mise à jour vers `> 3.8.8` ou plus.	Critical	Cwe 20 Cwe 94 Cwe 829 Electerm Project +13	il y a 3 mois
CVE-2026-6973 KEV	[KEV] Vulnérabilité dans Ivanti endpoint-manager-mobile-epmm (CVE-2026-6973) vulnérabilité dans Ivanti endpoint-manager-mobile-epmm (CVE-2026-6973). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.	High	Ivanti Endpoint Manager Mobile Epmm Cwe 20 Remote Code Execution +9	il y a 3 mois
CVE-2026-43208	Vulnérabilité dans linux (CVE-2026-43208) vulnérabilité dans linux (CVE-2026-43208). L'exploitation peut entraîner la prise de contrôle totale du système.	Critical	Linux Os Network Remote Code Execution +12	il y a 3 mois
CVE-2026-43205	In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate... In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate...	High	Cwe 787 Linux Linux Kernel Remote Code Execution	il y a 3 mois
CVE-2026-43198	Vulnérabilité dans linux (CVE-2026-43198) vulnérabilité dans linux (CVE-2026-43198). L'exploitation peut entraîner la prise de contrôle totale du système.	Critical	Linux Tcp Race Condition Cve 2026 43198 +11	il y a 3 mois
CVE-2026-43197	Vulnérabilité dans linux (CVE-2026-43197) vulnérabilité dans linux (CVE-2026-43197). Des informations confidentielles peuvent être exposées.	Critical	Linux Os Remote Code Execution Cwe 125 +6	il y a 3 mois
CVE-2026-43196	In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double... In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double...	High	C Cwe 415 Linux Linux Kernel +1	il y a 3 mois
CVE-2026-43185	Vulnérabilité dans linux (CVE-2026-43185) vulnérabilité dans linux (CVE-2026-43185). L'exploitation peut entraîner la prise de contrôle totale du système.	Critical	Linux Remote Code Execution Buffer Overflow Ksmbd +11	il y a 3 mois
CVE-2026-43186	Vulnérabilité dans c (CVE-2026-43186) vulnérabilité dans c (CVE-2026-43186). L'exploitation peut entraîner la prise de contrôle totale du système.	Critical	C Cwe 190 Cwe 122 Linux +13	il y a 3 mois
CVE-2026-43125	Écriture hors limites dans linux (CVE-2026-43125) écriture hors limites dans linux (CVE-2026-43125). L'exploitation peut entraîner la prise de contrôle totale du système.	Critical	Cwe 787 Linux Linux Kernel Buffer Overflow +16	il y a 3 mois
CVE-2026-43114	Vulnérabilité dans c (CVE-2026-43114) vulnérabilité dans c (CVE-2026-43114). Des informations confidentielles peuvent être exposées.	Critical	C Linux Linux Kernel Avx2 +13	il y a 3 mois
CVE-2026-43117	Vulnérabilité dans linux (CVE-2026-43117) vulnérabilité dans linux (CVE-2026-43117). Des informations confidentielles peuvent être exposées.	Critical	Linux Linux Kernel Os Privilege Escalation +11	il y a 3 mois
CVE-2026-43083	Vulnérabilité dans linux (CVE-2026-43083) vulnérabilité dans linux (CVE-2026-43083). Des informations confidentielles peuvent être exposées.	Critical	Linux Ipv6 Buffer Overflow Cwe 19 +10	il y a 3 mois
CVE-2026-0300 KEV	[KEV] Écriture hors limites dans Palo alto networks palo-alto-networks (CVE-2026-0300) écriture hors limites dans Palo alto networks palo-alto-networks (CVE-2026-0300). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.	Critical	Palo Alto Networks Pan Os Cwe 787 Firewall +67	il y a 3 mois
CVE-2026-43067	Vulnérabilité dans linux (CVE-2026-43067) vulnérabilité dans linux (CVE-2026-43067). L'exploitation peut entraîner la prise de contrôle totale du système.	Critical	Linux Ext4 Cwe 122 Cwe 22 +13	il y a 3 mois
CVE-2026-43038	Vulnérabilité dans linux (CVE-2026-43038) vulnérabilité dans linux (CVE-2026-43038). L'exploitation peut entraîner la prise de contrôle totale du système.	Critical	Linux Linux Kernel Ipv6 Icmp +9	il y a 3 mois
CVE-2026-31780	In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8... In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8...	High	Cwe 787 Linux Linux Kernel Buffer Overflow	il y a 3 mois
CVE-2026-31772	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix... In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix...	High	Cwe 787 Linux Linux Kernel Buffer Overflow +1	il y a 3 mois
CVE-2026-31773	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smp_random() currently lab... In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smp_random() currently labels the stored STK as authenticated whenever pending_sec_level is BT_SECURITY_HIGH. That reflects wh...	High	Linux Linux Kernel Bluetooth Cwe 254 +1	il y a 3 mois

Vulnérabilités

🍪 À propos des cookies