TYPE DE FAIBLESSE

CWE-837

14 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-837 (en anglais) →

CVE-2026-112285Les versions de la plateforme d'e-commerce Thelia antérieures aux versions 3.1.5 et 3.2.4 contiennent une faille dans la manière dont les limites des coupons sont suivies. Le logic… 5.3 MOYENNE

CVE-2026-45734Les versions du logiciel de forum MyBB antérieures à la 1.8.40 permettent à des attaquants distants et non authentifiés de contourner les protections CAPTCHA en réutilisant plusieu… 5.3 MOYENNE

CVE-2025-62784InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement a… 5.3 MOYENNE

CVE-2025-62783InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.1-SNAPSHOT and earlier contain a vulnerability where any plugin using the `GuiStorageEleme… 5.0 MOYENNE

CVE-2025-62782InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allo… 5.9 MOYENNE

CVE-2025-58135Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access. 5.3 MOYENNE

CVE-2024-11301In lunary-ai/lunary before version 1.6.3, the application allows the creation of evaluators without enforcing a unique constraint on the combination of projectId and slug. This all… 6.5 MOYENNE

CVE-2024-11717Tokens in CTFd used for account activation and password resetting can be used interchangeably for these operations. When used, they are sent to the server as a GET parameter and th… 6.3 MOYENNE

CVE-2024-11716While assignment of a user to a team (bracket) in CTFd should be possible only once, at the registration, a flaw in logic implementation allows an authenticated user to reset it's… 5.3 MOYENNE

CVE-2024-12123A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. When an authenticated user submits a ticket, … 5.3 MOYENNE

CVE-2024-4629A vulnerability was found in Keycloak. This flaw allows attackers to bypass brute force protection by exploiting the timing of login attempts. By initiating multiple login requests… 6.5 MOYENNE

CVE-2023-6759A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebResource/resource of the component Love Handler. The … 5.3 MOYENNE

CVE-2023-6438A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. T… 4.3 MOYENNE

CVE-2023-5313A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the co… 5.3 MOYENNE