Restez informés

Deux sections pour maintenir une veille efficace et rapide en cybersécurité. Une section de news pour avoir un aperçu des articles récents en rapport avec la cybersécurité et une section qui référence les CVE à haut score les plus récentes afin de comprendre du premier coup d'oeil ce qu'elles concernent sans avoir besoin de consulter de pages supplémentaires.

Actualité
Vulnérabilités

9.8

CVE-2026-76750 - Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager

Il y a 23 jour(s)

8.8

CVE-2026-76748 - Authenticated Privilege Escalation Vulnerability in the API of AOS-S

Il y a 23 jour(s)

9.3

CVE-2026-91107 - openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR)

Il y a 24 jour(s)

9.3

CVE-2026-21589 - Atlassian Data Center and Server Arbitrary File Access Vulnerability

Il y a 24 jour(s)

9.2

CVE-2026-77226 - Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint

Il y a 24 jour(s)

9.9

CVE-2026-105740 - Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server

Il y a 24 jour(s)

9.9

CVE-2026-105697 - Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

Il y a 24 jour(s)

8.8

CVE-2026-97257 - WordPress Simple Event Planner plugin <= 1.5.7 - PHP Object Injection vulnerability

Il y a 24 jour(s)

8.2

CVE-2026-94201 - Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash

Il y a 24 jour(s)

9.9

CVE-2026-105691 - Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color

Il y a 24 jour(s)

8.1

CVE-2026-105650 - Ghost: Stored XSS via oEmbed Photo Responses

Il y a 24 jour(s)

8.5

CVE-2026-103066 - WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability

Il y a 24 jour(s)

8.8

CVE-2026-100511 - WordPress VK Google Job Posting Manager plugin <= 1.3.1 - PHP Object Injection vulnerability

Il y a 24 jour(s)

9.8

CVE-2026-97283 - WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability

Il y a 24 jour(s)

8.8

CVE-2026-58835 - Bluetooth btif_storage Heap Buffer Overflow

Il y a 24 jour(s)

8.8

CVE-2026-55280 - Microsoft Windows Uninitialized Memory Out-of-Bounds Write

Il y a 24 jour(s)

8.8

CVE-2026-45524 - Android WifiPermissionsUtil Sandbox Escape Local Privilege Escalation

Il y a 24 jour(s)

8.8

CVE-2026-105642 - Ghost: Remote Code Execution via Bookmark Card Images

Il y a 24 jour(s)

9.8

CVE-2026-105641 - Plane: Hardcoded SECRET_KEY and LIVE_SERVER_SECRET_KEY shipped in aio/cli community deployment manifests — session forgery and live-server auth bypass

Il y a 24 jour(s)

9.1

CVE-2026-105640 - Plane: Account Takeover via Unverified OAuth Email Match (Gitea, self-managed GitLab)

Il y a 24 jour(s)

9.8

CVE-2026-105639 - Plane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Plane

Il y a 24 jour(s)

9.1

CVE-2026-105638 - Plane: Magic-code verifier endpoint has no rate limit, enabling 6-digit OTP brute force

Il y a 24 jour(s)

9.6

CVE-2026-105637 - Plane: Cross-Project Asset Hijacking via 'ProjectBulkAssetEndpoint' (sibling of CVE-2026-46558)

Il y a 24 jour(s)

9.9

CVE-2026-105636 - Plane: SSRF via HTTP redirect in webhook delivery (allow_redirects not set)

Il y a 24 jour(s)

8.1

CVE-2026-105634 - Plane: Privilege Escalation: Project Guest Can Demote Admin/Member Roles

Il y a 24 jour(s)