Web Application

🛡 Vulnérabilités associées 320

Image	ID	Titre	Gravité	Détecté
	CVE-2026-34621 KEV	[KEV] Vulnérabilité dans Adobe acrobat-and-reader (CVE-2026-34621)	High	il y a 6 mois
	CVE-2026-4326	The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activate...	High	il y a 6 mois
	CVE-2026-3243	The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up to, and including, 1....	High	il y a 6 mois
	CVE-2026-35209	defu is software that allows uers to assign default properties recursively. Prior to version 6.1.5, applications that pass unsanitized user input (e.g. parsed JSON request bodies, database records, or...	High	il y a 6 mois
	CVE-2026-1233	The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...	High	il y a 6 mois
	CVE-2026-3445	The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass i...	High	il y a 6 mois
	CVE-2026-4896	The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclu...	High	il y a 6 mois
	CVE-2026-4350	The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1. This is due to the `PMCS::action_handler()` method proce...	High	il y a 6 mois
	CVE-2026-3502 KEV	[KEV] Vulnérabilité dans TrueConf Client (CVE-2026-3502)	High	il y a 6 mois
	CVE-2026-33017 KEV	[KEV] Injection de code dans Langflow (CVE-2026-33017)	Critical	il y a 6 mois
	CVE-2026-23921	A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in...	High	il y a 6 mois
	CVE-2026-23920	Host and event action script input is validated with a regex (set by the administrator), but the...	High	il y a 6 mois
	CVE-2025-12821	The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 0.2.5...	High	il y a 7 mois
	CVE-2025-70151	Téléversement de fichier dangereux dans Fabian (CVE-2025-70151)	High	il y a 7 mois
	CVE-2026-1618	Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc....	High	il y a 8 mois
	CVE-2020-37210	SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste i...	High	il y a 8 mois
	CVE-2020-37211	SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character...	High	il y a 8 mois
	CVE-2020-37212	SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste...	High	il y a 8 mois
	CVE-2026-1819	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')...	High	il y a 8 mois
	CVE-2025-2155	Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade...	High	il y a 9 mois
	CVE-2025-64666	Vulnérabilité dans microsoft (CVE-2025-64666)	High	il y a 10 mois
	CVE-2025-64140	Injection de commande OS dans Jenkins (CVE-2025-64140)	High	il y a 11 mois
	CVE-2025-54236 KEV	[KEV] Vulnérabilité dans Adobe commerce (CVE-2025-54236)	Critical	il y a 11 mois
	CVE-2025-10458	Vulnérabilité dans Zephyrproject (CVE-2025-10458)	High	il y a 1 an
	CVE-2025-2411	Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano...	High	il y a 1 an
	CVE-2025-2413	Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor...	High	il y a 1 an
	CVE-2025-0610	Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request...	High	il y a 1 an
	CVE-2025-53786	Contournement d'authentification dans microsoft (CVE-2025-53786)	High	il y a 1 an
	CVE-2025-1675	Lecture hors limites dans Zephyrproject (CVE-2025-1675)	High	il y a 1 an
	CVE-2024-5971	A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not s...	High	il y a 2 ans