TYPE DE FAIBLESSE

CWE-791

16 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-791 (en anglais) →

CVE-2026-86206Les installations N-central sont affectées par une faille dans les filtres de contrôle d'accès de l'API interne. Un attaquant non authentifié disposant d'un accès réseau peut explo… 6.9 MOYENNE

CVE-2026-48208Les installations d'OTRS Community Edition (versions jusqu'à 2026.4.X) sont vulnérables à une attaque par déni de service via des images SVG spécialement conçues. Un attaquant non … 6.5 MOYENNE

CVE-2026-3714Les boutiques OpenCart utilisant la version 4.0.2.3 sont sensibles à une faille d'injection de modèle dans le panneau d'administration. Un attaquant disposant de privilèges adminis… 5.1 MOYENNE

CVE-2025-59303HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions. This can resu… 6.4 MOYENNE

CVE-2025-6761A vulnerability was found in Kingdee Cloud-Starry-Sky Enterprise Edition 6.x/7.x/8.x/9.0. It has been rated as critical. Affected by this issue is the function plugin.buildMobilePo… 5.5 MOYENNE

CVE-2025-2336Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image so… 4.8 MOYENNE

CVE-2025-5325A vulnerability has been found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as critical. Affected by this vulnerability is an unknown fu… 5.3 MOYENNE

CVE-2025-0716Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS allows attackers to bypass common image source restrictions. Thi… 4.8 MOYENNE

CVE-2025-3841A vulnerability, which was classified as problematic, was found in wix-incubator jam up to e87a6fd85cf8fb5ff37b62b2d68f917219d07ae9. This affects an unknown part of the file jam.py… 4.8 MOYENNE

CVE-2025-2040A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this vulnerability is an unknown functionality of the file /admin-api/bpm/model/d… 5.3 MOYENNE

CVE-2024-8373Improper sanitization of the value of the [srcset] attribute in <source> HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead… 4.8 MOYENNE

CVE-2024-39899PrivateBin is an online pastebin where the server has zero knowledge of pasted data. In v1.5, PrivateBin introduced the YOURLS server-side proxy. The idea was to allow using the YO… 5.3 MOYENNE

CVE-2024-32162CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion. 4.3 MOYENNE

CVE-2020-36827The XAO::Web module before 1.84 for Perl mishandles < and > characters in JSON output during use of json-embed in Web::Action. 5.4 MOYENNE

CVE-2023-31172 An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instru… 5.9 MOYENNE

CVE-2023-1076A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often corr… 5.5 MOYENNE