CVE-2026-62024 — Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions.
Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions.
CVSS 9.9
NVD · CVE récentesCWE-434
Cyber Threat Dashboard
Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
2575Éléments
17227 derniers jours
173Aujourd'hui
1013Critique + haute
12/10/2026 15:33Dernière collecte
CVE-2026-62022 — Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.
Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.
CVSS 9.8
NVD · CVE récentesCWE-266
CVE-2026-62021 — Subscriber PHP Object Injection in Angio <= 1.1.1 versions.
Subscriber PHP Object Injection in Angio <= 1.1.1 versions.
CVSS 8.8
NVD · CVE récentesCWE-502
CVE-2026-62020 — Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.
Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.
CVSS 8.1
NVD · CVE récentesCWE-98
CVE-2026-57742 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeRE…
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Planet: from n/a through 2.2.14.2.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-48194 — Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.
CVSS 8.1
NVD · CVE récentesCWE-98
CVE-2026-48193 — Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.
CVSS 8.1
NVD · CVE récentesCWE-98
CVE-2026-45440 — Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.
Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.
CVSS 7.6
NVD · CVE récentesCWE-89
CVE-2026-42777 — Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.
CVSS 8.1
NVD · CVE récentesCWE-98
CVE-2026-42724 — Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.
Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.
CVSS 8.1
NVD · CVE récentesCWE-98
CVE-2026-42723 — Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.
Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-42722 — Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.
Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.
CVSS 7.6
NVD · CVE récentesCWE-89