CVE-2026-73790 — A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.
A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.
CVSS 8.2
NVD · CVE récentesCWE-20
Cyber Threat Dashboard
Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
6863Éléments
50097 derniers jours
26Aujourd'hui
2980Critique + haute
17/10/2026 07:50Dernière collecte
CVE-2026-14851 — A vulnerability relating to the exposure of confidential information in the customer invoicing web applicatio…
A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financial data – including customer names, addr…
NVD · CVE récentesCWE-200
CVE-2026-107428 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWh…
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Reflected XSS.This issue affects Paid Videochat …
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-103671 — External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "Am…
External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redirected to an arbitrary website during the ordering process.…
CVSS 4.7
NVD · CVE récentesCWE-472
CVE-2026-92392 — During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRE…
During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.
NVD · CVE récentes
CVE-2026-110284 — The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local F…
The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the [lifterlms_ch…
CVSS 7.5
NVD · CVE récentesCWE-98
CVE-2026-110227 — Missing Authorization vulnerability in 10up Restricted Site Access restricted-site-access allows Exploiting I…
Missing Authorization vulnerability in 10up Restricted Site Access restricted-site-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restricted Site Access: from n/a throu…
CVSS 5.3
NVD · CVE récentesCWE-862
CVE-2026-109901 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeo…
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View …
CVSS 8.5
NVD · CVE récentesCWE-89
CVE-2026-107757 — The Gallery Custom Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_n…
The Gallery Custom Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name (profile.php) + comment (wp-comments-post.php)' parameter in all versions up to, and including, 2.3.3 due …
CVSS 4.9
NVD · CVE récentesCWE-79
CVE-2026-107756 — The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name + c…
The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name + comment' parameter in all versions up to, and including, 5.6.2 due to insufficient input sanitization and outpu…
CVSS 6.4
NVD · CVE récentesCWE-79
CVE-2026-107754 — The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vul…
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_images (file_info[2] = title)' parameter in all versions …
CVSS 6.4
NVD · CVE récentesCWE-79
CVE-2026-107751 — The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' paramete…
The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all versions up to, and including, 2.4.3 due to insufficient input sanitization and output escaping. This…
CVSS 7.2
NVD · CVE récentesCWE-79