TYPE DE FAIBLESSE

Chemin de recherche non fiable CWE-426

15 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-426 (en anglais) →

CVE-2026-14673Les serveurs PostgreSQL utilisant les versions 14, 15, 16 ou 18 sont concernés si l'extension `amcheck` est installée. Un attaquant disposant de privilèges élevés sur la base de do… 3.8 FAIBLE

CVE-2026-45772Les versions 1.1.0 à 2.9.13 de Turborepo sont affectées par une faille permettant l'exécution de code arbitraire sur votre machine ou votre serveur CI. Un attaquant peut déclencher… 0.0 AUCUNE

CVE-2026-40947Les systèmes Windows utilisant les logiciels FIDO2 ou YubiKey Manager de Yubico sont vulnérables à une faille de détournement de DLL (DLL hijacking). Un attaquant disposant d'un ac… 2.9 FAIBLE

CVE-2025-15321Les installations de Tanium Appliance sont affectées par un défaut de validation des entrées qui pourrait permettre à un utilisateur malveillant de lire des informations système li… 2.7 FAIBLE

CVE-2025-1398Mattermost Desktop App versions <=5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control… 3.3 FAIBLE

CVE-2024-3220There is a defect in the CPython standard library module “mimetypes” where on Windows the default list of known file locations are writable meaning other users can create invalid f… 2.3 FAIBLE

CVE-2025-0733A vulnerability, which was classified as problematic, was found in Postman up to 11.20 on Windows. This affects an unknown part in the library profapi.dll. The manipulation leads t… 2.0 FAIBLE

CVE-2025-0732A vulnerability, which was classified as problematic, has been found in Discord up to 1.0.9177 on Windows. Affected by this issue is some unknown functionality in the library profa… 2.0 FAIBLE

CVE-2024-13524A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality. The manip… 2.0 FAIBLE

CVE-2025-0567A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Install… 2.0 FAIBLE

CVE-2024-55503An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLD_INSERT_LIBRARIES component. 3.3 FAIBLE

CVE-2024-53407In Phiewer 4.1.0, a dylib injection leads to Command Execution which allow attackers to inject dylib file potentially leading to remote control and unauthorized access to sensitive… 3.3 FAIBLE

CVE-2024-22410Creditcoin is a network that enables cross-blockchain credit transactions. The Windows binary of the Creditcoin node loads a suite of DLLs provided by Microsoft at startup. If a ma… 3.3 FAIBLE

CVE-2023-39202Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via local access. 3.1 FAIBLE

CVE-2017-1144IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting. IBM X-Force ID: 122033. 2.5 FAIBLE