Vulnérabilités citées
Les CVE mentionnées dans l’actualité, avec leur gravité. Un score élevé indique une faille sérieuse, mais pas forcément exploitée.
| CVE | Score | Description | Articles |
|---|---|---|---|
| CVE-2025-70873 | 7.5 | An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying… | 1 |
| CVE-2026-110825 | 8.7 | The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, rega… | 1 |
| CVE-2026-110936 Exploitée activement |
8.4 | A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolle… | 1 |
| CVE-2026-11824 | 8.5 | SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrar… | 1 |
| CVE-2026-44415 | 8.9 | Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive… | 1 |
| CVE-2026-59241 | 8.7 | A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Upda… | 1 |
| CVE-2026-72895 | 8.4 | A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO… | 1 |
| CVE-2026-89196 | 8.7 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed d… | 1 |
| CVE-2026-89197 | 8.7 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notific… | 1 |
| CVE-2026-89198 | 8.7 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uplo… | 1 |
| CVE-2026-89199 | 8.7 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via spe… | 1 |
| CVE-2026-89200 | 8.4 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields … | 1 |
| CVE-2026-89201 | 7.7 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility n… | 1 |
| CVE-2026-89202 | 7.1 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection re… | 1 |
| CVE-2026-92450 | 8.7 | The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string with… | 1 |
| CVE-2026-96616 | 8.3 | Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making the… | 1 |
| CVE-2026-108398 | 8.8 | Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally. | 1 |
| CVE-2026-96951 Exploitée activement |
8.8 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a n… | 1 |
| CVE-2023-45208 | 8.8 | A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers (within range of … | 1 |
This product uses data from the NVD API but is not endorsed or certified by the NVD.