TYPE DE FAIBLESSE
CWE-273
6 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-273 (en anglais) →
CVE-2026-44073Les serveurs Netatalk (versions 1.5.0 à 4.4.2) sont affectés par une faille où le système ne vérifie pas s'il a correctement abandonné les privilèges administratifs. Un attaquant d…
5.0 MOYENNE
CVE-2025-62175Mastodon is a free, open-source social network server based on ActivityPub. In versions before 4.4.6, 4.3.14, and 4.2.27, disabling or suspending a user account does not disconnect…
4.3 MOYENNE
CVE-2023-26239An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as a…
5.5 MOYENNE
CVE-2021-37839Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, …
4.3 MOYENNE
CVE-2021-3982Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take advantage of the way CA…
5.5 MOYENNE
CVE-2019-14879A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities w…
5.4 MOYENNE