Veille CVE

Mardi 20 octobre 2026

949 CVE

Critique 80 Élevée 339 Moyenne 365 Faible 40 Non évaluée 125 Exploitées (KEV) Tri : plus récentes
  1. CVE-2024-54587 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  2. CVE-2024-54586 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  3. CVE-2024-54585 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  4. CVE-2024-54584 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  5. CVE-2024-54583 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  6. CVE-2024-54582 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  7. CVE-2023-42999 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  8. CVE-2023-42998 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  9. CVE-2023-42997 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  10. CVE-2023-42996 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  11. CVE-2023-42995 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  12. CVE-2023-42994 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  13. CVE-2023-42993 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  14. CVE-2023-42992 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  15. CVE-2023-42991 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  16. CVE-2023-42990 – Non évaluée Rejetée

    Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.

  17. CVE-2026-111865 5.3 Moyenne

    THU-MIG yoloe

    A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kpt_shape results in improper neutralization of directives in dynamically evaluated code. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

  18. CVE-2026-111934 3.7 Faible

    coder

    Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmost, client-supplied X-Forwarded-For value instead of the client IP appended by a reverse proxy. Attackers can send forged X-Forwarded-For values through appending proxies to bypass per-IP rate limits on login, one-time passcode, and password validation endpoints, enabling brute-force attacks, and to falsify IP addresses recorded in audit logs.

  19. CVE-2026-111933 3.7 Faible

    coder

    Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration vulnerability because userpassword.Compare() substitutes a placeholder hash derived from the string "hunter2" when a stored password hash is empty. Unauthenticated attackers can submit logins with the password "hunter2" and distinguish HTTP 403 from 401 responses to enumerate valid accounts and reveal the authentication provider of SSO-only users.

  20. CVE-2025-71435 4.2 Moyenne

    coder

    Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after OIDC token expiry when no refresh token is issued. Users can keep their APIKey cookie active through regular use, extending it every 24 hours to access Coder indefinitely after losing OIDC authorization.

  21. CVE-2025-23390 6.3 Moyenne

    SUSE fleet

    A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’t set in the `known_hosts` file. This could allow the execution of a man-in-the-middle (MitM) attack against Fleet. In case the server that is being connected to has a trusted entry in the known_hosts file, then Fleet will correctly check the authenticity of the presented certificate.

  22. CVE-2025-68404 7.5 Élevée

    QNAP Systems Inc. QuRouter

    A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QuRouter 2.6.4.001 and later

  23. CVE-2025-68403 4.6 Moyenne

    QNAP Systems Inc. QuRouter

    An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker gains an administrator account, they can then exploit the vulnerability to modify data on the system. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later

  24. CVE-2025-66275 6.5 Moyenne

    QNAP Systems Inc. Video Station · Qnap video station

    A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8.5 and later

  25. CVE-2025-66272 6.5 Moyenne

    QNAP Systems Inc. Video Station · Qnap video station

    A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8.5 and later

  26. CVE-2025-29897 2.3 Faible

    QNAP Systems Inc. Qsync Central

    A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later

  27. CVE-2025-29896 2.3 Faible

    QNAP Systems Inc. Qsync Central

    A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later

  28. CVE-2025-29895 2.3 Faible

    QNAP Systems Inc. Qsync Central

    A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later

  29. CVE-2025-58771 7.1 Élevée

    AMI AptioV

    AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability.

  30. CVE-2025-71432 8.1 Élevée

    frappe erpnext

    Frappe ERPNext before 14.92.1 and 15.x before 15.83.0 contains a reflected cross-site scripting vulnerability due to missing input validation on a certain page, allowing arbitrary JavaScript to execute in authenticated sessions. Remote attackers can lure a logged-in user into opening a crafted URL to run injected script and take over the victim's account.

  31. CVE-2025-71431 5.3 Moyenne

    frappe

    Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize user-supplied parameters before using them in LDAP queries. Attackers can supply crafted LDAP filter syntax through these parameters to alter the resulting directory queries.

  32. CVE-2025-71430 5.4 Moyenne

    frappe

    Frappe before 14.99.10 and 15.x before 15.91.1 contains a stored cross-site scripting vulnerability in the leaderboard page because user names are rendered without proper neutralization. Authenticated attackers can set a crafted user name that executes arbitrary JavaScript in the browsers of other users who view the leaderboard.

  33. CVE-2025-71429 9.8 Critique

    RVC-Boss GPT-SoVITS

    GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths. Attackers can enter shell substitutions like $(...) in the UVR5 WebUI output folder textboxes with mp3 or m4a export to run commands as the server user.

  34. CVE-2025-27902 6.1 Moyenne

    IBM DB2 Recovery Expert for Linux, UNIX and Windows

    IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser

  35. CVE-2025-27897 6.1 Moyenne

    IBM DB2 Recovery Expert for Linux, UNIX and Windows

    IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

  36. CVE-2025-27896 6.1 Moyenne

    IBM DB2 Recovery Expert for Linux, UNIX and Windows

    IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

  37. CVE-2025-27895 6.1 Moyenne

    IBM DB2 Recovery Expert for Linux, UNIX and Windows

    IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

  38. CVE-2025-15703 3.5 Faible

    Unknown HireZoot

    The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it is reflected back into an admin-area settings page, allowing users with the HireZoot WordPress plugin before 4.0.0's management capability (Administrator by default) to store a payload that is executed in the browser of any administrator who later opens that page. As the unfiltered_html capability is not available to administrators on multisite (or where DISALLOW_UNFILTERED_HTML is set), this leads to Stored Cross-Site Scripting.

  39. CVE-2025-14123 6.8 Moyenne

    davidanderson Redux Framework

    The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist / restrictions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to set an arbitrary role (e.g., Administrator) when performing a profile update if a plugin or theme using this framework has added at least one user profile field that leverages Redux_Users::set_profile/set_section/set_field.

  40. CVE-2025-15700 8.8 Élevée

    Unknown AWP Classifieds

    The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly accessible, network-shared directory and achieve remote code execution.

  41. CVE-2025-71428 4.9 Moyenne

    banq jivejdon

    Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents, including other accounts' password hashes.

  42. CVE-2025-64393 9.4 Critique

    Veeam Backup and Replication

    This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.

  43. CVE-2025-64392 4.8 Moyenne

    Veeam Backup Enterprise Manager

    This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link.

  44. CVE-2025-64391 4.1 Moyenne

    Veeam Agent for Windows

    This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it.

  45. CVE-2025-15694 3.5 Faible

    Unknown Joli Table Of Contents

    The Joli Table Of Contents WordPress plugin before 2.8.1 does not sanitise and escape some of its settings before outputting them in an admin page, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed, for example in a multisite setup.

  46. CVE-2025-15693 2.7 Faible

    Unknown JCH Optimize

    The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to enumerate directories and file names outside the web root.

  47. CVE-2025-14945 5.4 Moyenne

    netweblogic Events Manager – Calendar, Bookings, Tickets, and more!

    The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event attribute values in all versions up to, and including, 7.3.3. This is due to insufficient input sanitization when storing attribute values (using only `wp_unslash()` without sanitization) and lack of output escaping when rendering the '#_ATT{key}' placeholder. This makes it possible for authenticated attackers, with Author-level access and above, or unauthenticated attackers when anonymous event submissions are enabled, to inject arbitrary web scripts that execute when any user views the affected event page.

  48. CVE-2025-15691 5.3 Moyenne

    Unknown WPFunnels

    The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before creating accounts from opt-in form submissions, relying on a value supplied in the request instead, allowing unauthenticated attackers to create WordPress user accounts even when registration is disabled. This is an incomplete fix for CVE-2025-12353: the check added in 3.6.3 covers only one of the three registration paths.

  49. CVE-2025-12737 8.4 Élevée

    WSO2 Open Banking AM · WSO2 Open Banking IAM · WSO2 Traffic Manager · WSO2 Universal Gateway

    The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privileges to inject and execute arbitrary code remotely. Successful exploitation enables a threat actor with administrative privileges and Carbon Console access to execute remote arbitrary code through specific administrative operations, leading to a complete compromise of the affected system.