Vulnérabilités

Aggrégat CVE / GHSA / KEV / OSV — filtrage par étiquette et catégorie.

KEV

Catégories

Tous 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Groupes d'étiquettes

Tous 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Étiquettes populaires (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

ID	Titre	Gravité	Étiquettes	Détecté
CVE-2026-42752	Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions. Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions.	Medium	Cwe 440	il y a 3 semaines
CVE-2026-42686	Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions. Subscriber Cross Site Scripting (XSS) in EventPrime <= 4.3.2.1 versions.	High	Cross-Site Scripting Cwe 79	il y a 3 semaines
CVE-2026-42661	Custom role Path Traversal in WP Customer Area <= 8.3.4 versions. Custom role Path Traversal in WP Customer Area <= 8.3.4 versions.	High	Path Traversal Cwe 35	il y a 3 semaines
CVE-2026-42649	Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions. Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions.	High	Cross-Site Scripting Cwe 79	il y a 3 semaines
CVE-2026-42657	Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions. Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions.	Medium	Cwe 1284	il y a 3 semaines
CVE-2026-42650	Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions. Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.6.7 versions.	High	Cross-Site Scripting Cwe 79	il y a 3 semaines
CVE-2026-42639	Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions. Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions.	Critical	SQL Injection Cwe 89	il y a 3 semaines
CVE-2026-42640	Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions. Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions.	Medium	Cwe 862	il y a 3 semaines
CVE-2026-42658	Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions. Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions.	High	Cross-Site Scripting Cwe 79	il y a 3 semaines
CVE-2026-42411	Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions. Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions.	High	Cwe 288	il y a 3 semaines
CVE-2026-42659	Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions. Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions.	Medium	Cwe 862	il y a 3 semaines
CVE-2026-42656	Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions. Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions.	Medium	Cross-Site Scripting Cwe 79	il y a 3 semaines
CVE-2026-42663	Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions. Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.	Medium	Cross-Site Scripting Cwe 79	il y a 3 semaines
CVE-2026-40796	Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions. Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions.	Medium	Cwe 497	il y a 3 semaines
CVE-2026-42384	Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions. Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions.	High	Cwe 201	il y a 3 semaines
CVE-2026-41556	Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions. Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions.	Medium	Cross-Site Scripting Cwe 79	il y a 3 semaines
CVE-2026-40793	Subscriber Broken Access Control in Groundhogg < 4.4.1 versions. Subscriber Broken Access Control in Groundhogg < 4.4.1 versions.	Medium	Cwe 862	il y a 3 semaines
CVE-2026-40799	Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions. Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.	Medium	Cwe 288	il y a 3 semaines
CVE-2026-40769	Traversée de chemin dans CVE-2026-40769 (CVE-2026-40769) traversée de chemin dans CVE-2026-40769 (CVE-2026-40769). Risque d'opérations non autorisées ou de divulgation.	High	Cwe 22	il y a 3 semaines
CVE-2026-40792	Subscriber Insecure Direct Object References (IDOR) in KiviCare <= 4.2.1 versions. Subscriber Insecure Direct Object References (IDOR) in KiviCare <= 4.2.1 versions.	Medium	Cwe 639	il y a 3 semaines
CVE-2026-40779	Contributor Arbitrary File Deletion in Link Library <= 7.8.8 versions. Contributor Arbitrary File Deletion in Link Library <= 7.8.8 versions.	High	Cwe 22	il y a 3 semaines
CVE-2026-40791	Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions. Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions.	High	Cross-Site Scripting Cwe 79	il y a 3 semaines
CVE-2026-40795	Subscriber Broken Access Control in Amelia <= 2.2 versions. Subscriber Broken Access Control in Amelia <= 2.2 versions.	Medium	Cwe 862	il y a 3 semaines
CVE-2026-40787	Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.0.0 versions. Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.0.0 versions.	High	Cross-Site Scripting Cwe 79	il y a 3 semaines
CVE-2026-40788	Subscriber Broken Access Control in ChatBot <= 7.9.7 versions. Subscriber Broken Access Control in ChatBot <= 7.9.7 versions.	High	Cwe 862	il y a 3 semaines
CVE-2026-42378	Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions. Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions.	Medium	Cwe 288	il y a 3 semaines
CVE-2026-40789	Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions. Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions.	High	Cwe 201	il y a 3 semaines
CVE-2026-40794	Subscriber Broken Access Control in myCred <= 3.0.3 versions. Subscriber Broken Access Control in myCred <= 3.0.3 versions.	Medium	Cwe 862	il y a 3 semaines
CVE-2026-40774	Unauthenticated Broken Access Control in Booking Package <= 1.7.06 versions. Unauthenticated Broken Access Control in Booking Package <= 1.7.06 versions.	High	Cwe 862	il y a 3 semaines
CVE-2026-40775	Unauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions. Unauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions.	High	Cwe 862	il y a 3 semaines
CVE-2026-42386	Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions. Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions.	Critical	SQL Injection Cwe 89	il y a 3 semaines
CVE-2026-40767	Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions. Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions.	High	Cwe 281	il y a 3 semaines
CVE-2026-40773	Vulnérabilité dans wordpress (CVE-2026-40773) vulnérabilité dans wordpress (CVE-2026-40773). Les données peuvent être altérées par des attaquants.	Medium	WordPress Cwe 862	il y a 3 semaines
CVE-2026-40798	Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions. Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions.	Critical	SQL Injection Cwe 89	il y a 3 semaines
CVE-2026-40785	Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions. Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions.	High	Cwe 288	il y a 3 semaines
CVE-2026-40781	Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions. Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions.	High	Cwe 288	il y a 3 semaines
CVE-2026-40790	Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions. Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.	Medium	Cwe 288	il y a 3 semaines
CVE-2026-40782	Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions. Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions.	Medium	Cwe 862	il y a 3 semaines
CVE-2026-40766	Subscriber SQL Injection in MasterStudy LMS <= 3.7.25 versions. Subscriber SQL Injection in MasterStudy LMS <= 3.7.25 versions.	High	SQL Injection Cwe 89	il y a 3 semaines
CVE-2026-42381	Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions. Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions.	Critical	SQL Injection Cwe 89	il y a 3 semaines
CVE-2026-40770	Unauthenticated Cross Site Scripting (XSS) in Coupon Affiliates <= 7.5.3 versions. Unauthenticated Cross Site Scripting (XSS) in Coupon Affiliates <= 7.5.3 versions.	High	Cross-Site Scripting Cwe 79	il y a 3 semaines
CVE-2026-40772	Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions. Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions.	Critical	Cwe 434	il y a 3 semaines
CVE-2026-40771	Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions. Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions.	Critical	SQL Injection Cwe 89	il y a 3 semaines
CVE-2026-40776	Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.8 versions. Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.8 versions.	High	Cwe 862	il y a 3 semaines
CVE-2026-40762	Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions. Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions.	High	SQL Injection Cwe 89	il y a 3 semaines
CVE-2026-40727	Sales Representative Arbitrary File Deletion in Groundhogg <= 4.4 versions. Sales Representative Arbitrary File Deletion in Groundhogg <= 4.4 versions.	High	Cwe 22	il y a 3 semaines
CVE-2026-40743	Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions. Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions.	Medium	Cwe 862	il y a 3 semaines
CVE-2026-39583	Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions. Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions.	Critical	Privilege Escalation Cwe 266	il y a 3 semaines
CVE-2026-40741	Unauthenticated Broken Access Control in Redsys for WooCommerce Light <= 7.0.0 versions. Unauthenticated Broken Access Control in Redsys for WooCommerce Light <= 7.0.0 versions.	High	Cwe 862	il y a 3 semaines
CVE-2026-39540	Subscriber Cross Site Scripting (XSS) in Shipment Tracker for Woocommerce <= 1.5.3.2 versions. Subscriber Cross Site Scripting (XSS) in Shipment Tracker for Woocommerce <= 1.5.3.2 versions.	Medium	Cross-Site Scripting Cwe 79	il y a 3 semaines

Vulnérabilités

🍪 À propos des cookies