TYPE DE FAIBLESSE

CWE-489

25 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-489 (en anglais) →

CVE-2026-15575Costifier, un outil logiciel développé par SFM Software Technologies Inc., est affecté dans toutes les versions publiées jusqu'au 16 octobre 2026. La faille existe car le logiciel … 5.3 MOYENNE

CVE-2026-50228Le logiciel Acer NitroSense (version 5.2.63 et antérieures) laisse un port de débogage ouvert sur la machine locale. Un attaquant disposant déjà d'un accès local à votre système pe… 6.1 MOYENNE

CVE-2026-41186Les composants kube-controllers de Calico et Goldmane sont affectés si le serveur de débogage partagé optionnel est activé. Un attaquant ayant un accès réseau à l'écouteur peut réc… 6.0 MOYENNE

CVE-2026-58191Les serveurs Appium utilisant des versions antérieures à la 10.7.0 sont vulnérables aux failles de cross-site scripting (XSS) réfléchies. Un attaquant distant non authentifié peut … 6.5 MOYENNE

CVE-2026-32662Les logiciels contenant ces points de terminaison d'API de développement et de test résiduels sont susceptibles d'être victimes d'accès non autorisés. Un attaquant peut utiliser ce… 6.9 MOYENNE

CVE-2026-27131Les sites Craft CMS utilisant le plugin Sprig (versions 2.0.0 à 2.15.1 et 3.0.0 à 3.15.1) sont concernés. Un attaquant disposant de privilèges d'administrateur ou d'un accès spécif… 5.5 MOYENNE

CVE-2025-42872Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of othe… 6.1 MOYENNE

CVE-2025-54660An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a loca… 5.5 MOYENNE

CVE-2025-21472Information disclosure while capturing logs as eSE debug messages are logged. 5.5 MOYENNE

CVE-2025-1479An open debug interface was reported in the Legion Space software included on certain Legion devices that could allow a local attacker to execute arbitrary code. 4.8 MOYENNE

CVE-2024-29075Active debug code vulnerability exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacke… 4.6 MOYENNE

CVE-2024-41999Smart-tab Android app installed April 2023 or earlier contains an active debug code vulnerability. If this vulnerability is exploited, an attacker with physical access to the devic… 6.8 MOYENNE

CVE-2024-7756A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell. 6.8 MOYENNE

CVE-2024-30219Active debug code vulnerability exists in PLANEX COMMUNICATIONS wireless LAN routers. If a logged-in user who knows how to use the debug function accesses the device's management p… 6.8 MOYENNE

CVE-2023-4227A vulnerability has been identified in the ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which can be exploited by malicious actors to potentially gain unau… 5.3 MOYENNE

CVE-2023-21496Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug function via setting debug level. 6.1 MOYENNE

CVE-2022-29481A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted series of network requests can lead to dis… 6.5 MOYENNE

CVE-2022-26023A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted series of network requests can lead to di… 6.5 MOYENNE

CVE-2021-3972A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker wit… 6.7 MOYENNE

CVE-2021-3971A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow … 6.7 MOYENNE

CVE-2021-23861By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the … 6.5 MOYENNE

CVE-2021-1381A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open… 6.1 MOYENNE

CVE-2021-1398A vulnerability in the boot logic of Cisco IOS XE Software could allow an authenticated, local attacker with level 15 privileges or an unauthenticated attacker with physical access… 6.8 MOYENNE

CVE-2021-1391A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerabi… 5.1 MOYENNE

CVE-2020-8320An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. 6.4 MOYENNE