Connexion Inscription
JA · EN · FR
SecPulse

Vulnérabilités

Aggrégat CVE / GHSA / KEV / OSV — filtrage par étiquette et catégorie.

Catégories
Tous 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other
Groupes d'étiquettes
Tous 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15
Étiquettes populaires (Top 40)
Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337
ID Titre
CVE-2026-73342 Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.
CVE-2026-73348 Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.
Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.
CVE-2026-73341 Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.
Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.
CVE-2026-73189 Subscriber Insecure Direct Object References (IDOR) in WP Crowdfunding < 2.2.1 versions.
Subscriber Insecure Direct Object References (IDOR) in WP Crowdfunding < 2.2.1 versions.
CVE-2026-73187 Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.
Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.
CVE-2026-73190 Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium Packages <= 7.0.5 versions.
Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium Packages <= 7.0.5 versions.
CVE-2026-73181 Traversée de chemin dans CVE-2026-73181 (CVE-2026-73181)
traversée de chemin dans CVE-2026-73181 (CVE-2026-73181). Des informations confidentielles peuvent être exposées.
CVE-2026-66679 Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions.
Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions.
CVE-2026-68568 Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions.
Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions.
CVE-2026-68565 Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions.
CVE-2026-68567 Unauthenticated Cross Site Scripting (XSS) in Convert Pro <= 1.0.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Convert Pro <= 1.0.1 versions.
CVE-2026-66644 Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions.
Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions.
CVE-2026-66641 Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions.
Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions.
CVE-2026-66645 Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions.
Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions.
CVE-2026-66635 Unauthenticated Cross Site Request Forgery (CSRF) in Slider by 10Web <= 1.2.62 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in Slider by 10Web <= 1.2.62 versions.
CVE-2026-66637 Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions.
Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions.
CVE-2026-66646 Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.
Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.
CVE-2026-66046 Vulnérabilité dans c (CVE-2026-66046)
vulnérabilité dans c (CVE-2026-66046). Risque d'opérations non autorisées ou de divulgation.
CVE-2026-66793 Vulnérabilité dans privilege-escalation (CVE-2026-66793)
vulnérabilité dans privilege-escalation (CVE-2026-66793). L'exploitation peut entraîner la prise de contrôle totale du système.
CVE-2026-66643 Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions.
Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions.
CVE-2026-66627 Contributor Arbitrary File Upload in GP Premium <= 2.5.5 versions.
Contributor Arbitrary File Upload in GP Premium <= 2.5.5 versions.
CVE-2026-66640 Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.
Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.
CVE-2026-66622 Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions.
Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions.
CVE-2026-66638 Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions.
Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions.
CVE-2026-66629 Unauthenticated Cross Site Scripting (XSS) in Kirki <= 6.2.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Kirki <= 6.2.3 versions.
CVE-2026-66634 Subscriber Insecure Direct Object References (IDOR) in Modal Survey <= 2.0.2.2.3 versions.
Subscriber Insecure Direct Object References (IDOR) in Modal Survey <= 2.0.2.2.3 versions.
CVE-2026-66621 Unauthenticated Cross Site Scripting (XSS) in Ultimate Dashboard <= 3.11.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Ultimate Dashboard <= 3.11.2 versions.
CVE-2026-66636 Contributor Cross Site Scripting (XSS) in Wise Chat <= 3.4 versions.
Contributor Cross Site Scripting (XSS) in Wise Chat <= 3.4 versions.
CVE-2026-66633 Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions.
Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions.
CVE-2026-66667 Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions.
CVE-2026-66639 XSS (Cross-Site Scripting) dans CVE-2026-66639 (CVE-2026-66639)
XSS dans CVE-2026-66639 (CVE-2026-66639). Risque d'opérations non autorisées ou de divulgation.
CVE-2026-66651 Unauthenticated Broken Access Control in MultiVendorX <= 5.0.14 versions.
Unauthenticated Broken Access Control in MultiVendorX <= 5.0.14 versions.
CVE-2026-73692 Autorisation incorrecte dans CVE-2026-73692 (CVE-2026-73692)
vulnérabilité dans CVE-2026-73692 (CVE-2026-73692). Risque d'opérations non autorisées ou de divulgation.
CVE-2026-32473 SSRF (Falsification de requête côté serveur) dans ssrf (CVE-2026-32473)
SSRF dans ssrf (CVE-2026-32473). Risque d'opérations non autorisées ou de divulgation.
CVE-2026-32470 Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.
Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.
CVE-2026-32547 Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions.
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions.
CVE-2026-66620 Editor PHP Object Injection in OptionTree <= 2.7.3 versions.
Editor PHP Object Injection in OptionTree <= 2.7.3 versions.
CVE-2026-32472 Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions.
Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions.
CVE-2026-32481 Unauthenticated Broken Authentication in Ezoic <= 2.22.11 versions.
Unauthenticated Broken Authentication in Ezoic <= 2.22.11 versions.
CVE-2026-32549 Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.
Unauthenticated Broken Access Control in ThumbPress < 6.5 versions.
CVE-2026-32468 Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions.
Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions.
CVE-2026-32474 Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.
Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.
CVE-2026-18534 Vulnérabilité dans CVE-2026-18534 (CVE-2026-18534)
vulnérabilité dans CVE-2026-18534 (CVE-2026-18534). Les données peuvent être altérées par des attaquants.
CVE-2026-61407 Vulnérabilité dans privilege-escalation (CVE-2026-61407)
vulnérabilité dans privilege-escalation (CVE-2026-61407). L'exploitation peut entraîner la prise de contrôle totale du système.
CVE-2026-32467 Subscriber Server Side Request Forgery (SSRF) in [Aotuman] Grab WeChat Articles <= 2.0.1 versions.
Subscriber Server Side Request Forgery (SSRF) in [Aotuman] Grab WeChat Articles <= 2.0.1 versions.
CVE-2026-32553 Unauthenticated Server Side Request Forgery (SSRF) in OttoKit <= 1.1.35 versions.
Unauthenticated Server Side Request Forgery (SSRF) in OttoKit <= 1.1.35 versions.
CVE-2026-32466 Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.
Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.
CVE-2026-32463 Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.
Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.
CVE-2026-32464 Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.
Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.
CVE-2026-28568 Unauthenticated Cross Site Scripting (XSS) in Quill Forms <= 5.7.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Quill Forms <= 5.7.1 versions.

🍪 À propos des cookies

Nous utilisons des cookies pour conserver votre session, mémoriser la langue et améliorer le service.

En savoir plus →