Vulnérabilités

Aggrégat CVE / GHSA / KEV / OSV — filtrage par étiquette et catégorie.

KEV

Catégories

Tous 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Groupes d'étiquettes

Tous 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Étiquettes populaires (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Titre	Gravité	Étiquettes	Détecté
CVE-2026-48882	Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions. Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions.	High	SQL Injection Cwe 89	il y a 2 mois
CVE-2026-48868	Unauthenticated Insecure Direct Object References (IDOR) in Simple Shopping Cart <= 5.2.9 versions. Unauthenticated Insecure Direct Object References (IDOR) in Simple Shopping Cart <= 5.2.9 versions.	High	Cwe 639	il y a 2 mois
CVE-2026-48867	Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions. Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions.	High	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-48870	Subscriber Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.62 versions. Subscriber Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.62 versions.	Medium	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-48878	Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions. Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions.	Medium	Cwe 497	il y a 2 mois
CVE-2026-42662	Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions. Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.	Medium	Cwe 290	il y a 2 mois
CVE-2026-42651	Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions. Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions.	Medium	Cwe 862	il y a 2 mois
CVE-2026-42660	Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions. Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions.	Medium	Cwe 497	il y a 2 mois
CVE-2026-42665	Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions. Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.	Critical	SQL Injection Cwe 89	il y a 2 mois
CVE-2026-42687	Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions. Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions.	High	PHP Cwe 502	il y a 2 mois
CVE-2026-42655	Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions. Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions.	Medium	Cwe 472	il y a 2 mois
CVE-2026-45441	Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions. Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions.	High	Cwe 1284	il y a 2 mois
CVE-2026-45437	XSS (Cross-Site Scripting) dans CVE-2026-45437 (CVE-2026-45437) XSS dans CVE-2026-45437 (CVE-2026-45437). Risque d'opérations non autorisées ou de divulgation.	High	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-42688	Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions. Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions.	Medium	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-42666	Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions. Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions.	High	Cwe 862	il y a 2 mois
CVE-2026-42668	Vulnérabilité dans CVE-2026-42668 (CVE-2026-42668) vulnérabilité dans CVE-2026-42668 (CVE-2026-42668). Des informations confidentielles peuvent être exposées.	High	Cwe 288	il y a 2 mois
CVE-2026-47825	Vulnérabilité dans CVE-2026-47825 (CVE-2026-47825) vulnérabilité dans CVE-2026-47825 (CVE-2026-47825). Les données peuvent être altérées par des attaquants.	High	Cwe 346	il y a 2 mois
CVE-2026-42667	Unauthenticated Sensitive Data Exposure in Bookly <= 27.4 versions. Unauthenticated Sensitive Data Exposure in Bookly <= 27.4 versions.	High	Cwe 201	il y a 2 mois
CVE-2026-42775	Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions. Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions.	High	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-42743	Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions. Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions.	Medium	Cwe 347	il y a 2 mois
CVE-2026-42664	Vulnérabilité dans CVE-2026-42664 (CVE-2026-42664) vulnérabilité dans CVE-2026-42664 (CVE-2026-42664). Risque d'opérations non autorisées ou de divulgation.	High	Cwe 862	il y a 2 mois
CVE-2026-42752	Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions. Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions.	Medium	Cwe 440	il y a 2 mois
CVE-2026-42686	Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions. Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions.	High	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-42661	Custom role Path Traversal in WP Customer Area <= 8.3.4 versions. Custom role Path Traversal in WP Customer Area <= 8.3.4 versions.	High	Path Traversal Cwe 35	il y a 2 mois
CVE-2026-42649	Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions. Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions.	High	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-42657	Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions. Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions.	Medium	Cwe 1284	il y a 2 mois
CVE-2026-42650	Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions. Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions.	High	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-42639	Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions. Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions.	Critical	SQL Injection Cwe 89	il y a 2 mois
CVE-2026-42640	Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions. Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions.	Medium	Cwe 862	il y a 2 mois
CVE-2026-42658	Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions. Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions.	High	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-42411	Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions. Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions.	High	Cwe 288	il y a 2 mois
CVE-2026-42659	Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions. Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions.	Medium	Cwe 862	il y a 2 mois
CVE-2026-42656	Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions. Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions.	Medium	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-42663	Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions. Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.	Medium	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-40796	Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions. Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions.	Medium	Cwe 497	il y a 2 mois
CVE-2026-42384	Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions. Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions.	High	Cwe 201	il y a 2 mois
CVE-2026-41556	Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions. Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions.	Medium	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-40793	Subscriber Broken Access Control in Groundhogg < 4.4.1 versions. Subscriber Broken Access Control in Groundhogg < 4.4.1 versions.	Medium	Cwe 862	il y a 2 mois
CVE-2026-40799	Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions. Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.	Medium	Cwe 288	il y a 2 mois
CVE-2026-40769	Traversée de chemin dans CVE-2026-40769 (CVE-2026-40769) traversée de chemin dans CVE-2026-40769 (CVE-2026-40769). Risque d'opérations non autorisées ou de divulgation.	High	Cwe 22	il y a 2 mois
CVE-2026-40792	Subscriber Insecure Direct Object References (IDOR) in KiviCare <= 4.2.1 versions. Subscriber Insecure Direct Object References (IDOR) in KiviCare <= 4.2.1 versions.	Medium	Cwe 639	il y a 2 mois
CVE-2026-40779	Contributor Arbitrary File Deletion in Link Library <= 7.8.8 versions. Contributor Arbitrary File Deletion in Link Library <= 7.8.8 versions.	High	Cwe 22	il y a 2 mois
CVE-2026-40791	Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions. Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions.	High	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-40795	Subscriber Broken Access Control in Amelia <= 2.2 versions. Subscriber Broken Access Control in Amelia <= 2.2 versions.	Medium	Cwe 862	il y a 2 mois
CVE-2026-40787	Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.0.0 versions. Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.0.0 versions.	High	Cross-Site Scripting Cwe 79	il y a 2 mois
CVE-2026-40788	Subscriber Broken Access Control in ChatBot <= 7.9.7 versions. Subscriber Broken Access Control in ChatBot <= 7.9.7 versions.	High	Cwe 862	il y a 2 mois
CVE-2026-42378	Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions. Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions.	Medium	Cwe 288	il y a 2 mois
CVE-2026-40789	Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions. Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions.	High	Cwe 201	il y a 2 mois
CVE-2026-40794	Subscriber Broken Access Control in myCred <= 3.0.3 versions. Subscriber Broken Access Control in myCred <= 3.0.3 versions.	Medium	Cwe 862	il y a 2 mois
CVE-2026-40774	Unauthenticated Broken Access Control in Booking Package <= 1.7.06 versions. Unauthenticated Broken Access Control in Booking Package <= 1.7.06 versions.	High	Cwe 862	il y a 2 mois

Vulnérabilités

🍪 À propos des cookies