Cyber Threat Dashboard

Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.

6837Éléments

50567 derniers jours

0Aujourd'hui

2967Critique + haute

17/10/2026 07:41Dernière collecte

MoyenneVulnérabilité CVE-2026-109970

CVE-2026-109970 — A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11 token PIN…

A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11 token PIN in plaintext to a file without setting restrictive permissions. Under the default process umask, the file is …

CVSS 4.7

NVD · CVE récentes14/10/2026 12:17CWE-538

MoyenneVulnérabilité CVE-2026-108937

CVE-2026-108937 — A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affect…

A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information…

CVSS 5.3

NVD · CVE récentes13/10/2026 01:17CWE-200 CWE-538

MoyenneVulnérabilité CVE-2026-44828

CVE-2026-44828 — Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/init_step/ t…

Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/init_step/ through init_step_api without authentication, authorization, or a setup-completion guard. An unauthenticated re…

NVD · CVE récentes13/10/2026 00:17CWE-538