Veille CVE

Vendredi 16 octobre 2026

9 CVE sur 514

Critique 49 Élevée 175 Moyenne 263 Faible 18 Non évaluée 9 Exploitées (KEV) Tri : plus récentes
  1. CVE-2025-55640 – Non évaluée

    A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

  2. CVE-2025-52097 – Non évaluée

    Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding

  3. CVE-2026-111593 – Non évaluée Rejetée

    Rejected reason: This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips for WooCommerce WordPress plugin and was never published. On validation the reported behaviour was determined not to be a vulnerability: the Shop Manager role that could invoke the bulk invoice deletion and renumbering tool already holds the equivalent capability through the plugin's normal per-order invoice controls and through WooCommerce order management, so it crosses no privilege boundary. No CVE record should reference this ID.

  4. CVE-2026-8311 – Non évaluée Rejetée

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  5. CVE-2026-5819 – Non évaluée Rejetée

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  6. CVE-2026-2937 – Non évaluée Rejetée

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  7. CVE-2026-107316 – Non évaluée Rejetée

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  8. CVE-2026-107172 – Non évaluée Rejetée

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  9. CVE-2025-3778 – Non évaluée Rejetée

    Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.