CVE Security

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via ...

Mobile Web


                                    CVE-2026-103998

Lire l'article

critical 10

16/10/2026

🔥 EXPLOITÉ - Fortinet Multiple Products Path Traversal Vulnerability

Vulnérabilité activement exploitée dans la nature - Action immédiate requise

iOS Mobile Réseau


                                    CVE-2025-61624

Lire l'article

medium 4.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-107857

Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync beare...

Mobile


                                    CVE-2026-107857

Lire l'article

high 8.2

16/10/2026

Vulnérabilité high détectée - CVE-2026-90983

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Authentication Bypass. This issu...

Mobile


                                    CVE-2026-90983

Lire l'article

unknown

16/10/2026

Vulnérabilité unknown détectée - CVE-2026-104117

A missing authorization check in the illumos IP management daemon (ipmgmtd) allows a local user to change the persistent IP multipathing (IPMP) config...

iOS Mobile Windows


                                    CVE-2026-104117

Lire l'article

unknown

16/10/2026

Vulnérabilité unknown détectée - CVE-2026-104113

A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request tha...

iOS Mobile Windows


                                    CVE-2026-104113

Lire l'article

medium 5.1

15/10/2026

Vulnérabilité medium détectée - CVE-2026-107888

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary pri...

iOS Mobile


                                    CVE-2026-107888

Lire l'article

high 7.1

15/10/2026

Vulnérabilité high détectée - CVE-2026-107337

The Malcolm kiosk Flask application exposes a POST /script_call/<script> endpoint with zero authentication and wildcard CORS (CORS(app)). An attacker ...

iOS Mobile Web


                                    CVE-2026-107337

Lire l'article

unknown

14/10/2026

Vulnérabilité unknown détectée - CVE-2026-92862

The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary...

Android Mobile


                                    CVE-2026-92862

Lire l'article

unknown

14/10/2026

Vulnérabilité unknown détectée - CVE-2026-92861

The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the applicati...

Android Mobile


                                    CVE-2026-92861

Lire l'article

medium 6.3

14/10/2026

Vulnérabilité medium détectée - CVE-2026-76280

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, an auth...

Mobile


                                    CVE-2026-76280

Lire l'article

medium 4

14/10/2026

Vulnérabilité medium détectée - CVE-2026-101886

Cisco Jabber for Android (com.cisco.im) before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions t...

Android Mobile Réseau


                                    CVE-2026-101886

Lire l'article

1 2 3