Alertes CVE par stack

Déclare ton stack (Laravel, Node.js, Docker…) et reçois un email dès qu'une faille CVE l'affecte.

S'inscrire gratuitement Se connecter

6,191 CVE trackés

550 Critiques

1,698 High

678 Cette semaine

CVEs récents

Mis à jour quotidiennement via NVD NIST

CVE-2026-84175

In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing or Feature, without va...

NVD

4 days ago

CVE-2026-53683 MEDIUM CVSS 4.3

reset_password.html parses query string parameters and uses the 'url' parameter as a redirection target (window.location = url) after password reset, optionally delayed by a 'delay' parameter. No vali...

NVD

4 days ago

CVE-2026-75528 HIGH CVSS 7.2

The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author URL / Link Log in all versions up to, and including, 2.4.13 due to insufficient input sanit...

NVD

4 days ago

CVE-2026-23584

Rejected reason: Withdrawn by requester.

NVD

4 days ago

CVE-2026-23585

Rejected reason: Withdrawn by requester.

NVD

4 days ago

CVE-2026-23586

Rejected reason: Withdrawn by requester.

NVD

4 days ago

CVE-2026-23587

Rejected reason: Withdrawn by requester.

NVD

4 days ago

CVE-2026-23588

Rejected reason: Withdrawn by requester.

Résumé IA :
Cet identifiant CVE a été officiellement rejeté et retiré par son demandeur, ce qui signifie qu'il ne correspond à aucune vulnérabilité réelle ou exploitable. Il n'y a donc aucun impact de sécurité ni aucun risque technique pesant sur vos systèmes ou vos développements.

NVD

4 days ago

CVE-2026-23589

Rejected reason: Withdrawn by requester.

NVD

4 days ago

CVE-2026-23590

Rejected reason: Withdrawn by requester.

NVD

4 days ago

CVE-2026-23591

Rejected reason: Withdrawn by requester.

NVD

4 days ago

CVE-2026-14828 HIGH CVSS 8.8

Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to an authenticated SQL Injection vulnerabili...

NVD

4 days ago

CVE-2026-23583

Rejected reason: Withdrawn by requester.

Résumé IA :
Cet identifiant CVE a été officiellement rejeté et retiré à la demande de son émetteur. Il ne correspond à aucune faille de sécurité active, validée ou exploitable dans un composant logiciel. L'impact concret est donc totalement nul pour vos applications et votre infrastructure.

NVD

4 days ago

CVE-2025-7963 MEDIUM CVSS 6.4

The Easy Waveform Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode_easywaveformplayer() function in all versions up to, and including, 1.2.2 due to insufficie...

NVD

4 days ago

CVE-2026-51754

Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to overwrite the slave IP inventory state via sending a crafted MQTT me...

NVD

4 days ago

CVE-2026-51756 MEDIUM CVSS 5.9

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start firmware flashing using existing upgrade files via sending a craf...

NVD

4 days ago

CVE-2026-51748 MEDIUM CVSS 5.9

Incorrect access control in the sendStaticInfoToMaster function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to update stored slave inventory records via sending a crafted MQT...

NVD

4 days ago

CVE-2026-51750

Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rescan and switch the primary mesh channel via sending a crafted MQTT...

NVD

4 days ago

CVE-2026-51751

Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove a specified slave device from local mesh management data and reb...

NVD

4 days ago

CVE-2026-51752 MEDIUM CVSS 5.3

Incorrect access control in the staticInfoSend function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger static information reporting to the configured master via sendi...

NVD

4 days ago

1 2 ... 19 20 21 ... 309 310

Sois alerté dès qu'une faille touche ton stack

Email automatique avec description et recommandation de patch.

Créer un compte gratuit

Alertes CVE par stack

CVEs récents

Sois alerté dès qu'une faille touche ton stack

🍪 Nous utilisons des cookies