KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.6 and below, the SYSTEM-level service SbieSvc.exe exposes SbieIniServer::RC4Crypt to sandboxed processes. The handler adds a fixed…
MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and escalate privileges under certain concurrent conditions. This issue is fixed in version 2.4.0.
Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form. Attackers can inject specific SQL payloads like ' or '1'='1 to gain unauthorized administrative access…
xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting malicious SQL code through the msgid parameter. Attackers can send crafted requests to /shoutedit.php with…
Luka w Compuware iStrobe Web umożliwia zdalne wykonanie kodu przez nieautoryzowanych użytkowników.
Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit vulnerable endpoints like getAllParks.php and events-ajax.php by…
Wstrzyknięcie SQL w Xhibiter NFT Marketplace umożliwia manipulację danymi w bazie.
Wykonanie zdalnego kodu w dizqueTV umożliwia atakującym wstrzykiwanie poleceń przez ustawienia ścieżki.
Błąd odczytu poza granicami w AzeoTech DAQFactory może prowadzić do ujawnienia informacji lub awarii systemu.
Przepełnienie bufora w AzeoTech DAQFactory umożliwia zdalne wykonanie kodu.
Wykorzystanie niezinicjalizowanego wskaźnika w AzeoTech DAQFactory pozwala na zdalne wykonanie kodu.
A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /preview7.php. This manipulation of the argument course_year_section/semester causes sql injection.…
Błąd w AudioDecoder::HandleProduceRequest umożliwia zdalne wykonanie kodu bez interakcji użytkownika.
A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results…
A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The affected element is an unknown function of the file /admin/admin_running.php. This manipulation of the argument pid causes sql injection. It is possible to initiate the attack…
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these…
An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these…
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these…
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these…
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these…
Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger these…
An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary code via injecting a crafted payload into an uploaded file name.
A weakness has been identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /view_book.php. Executing a manipulation of the argument book_id can lead to sql injection. The attack can be executed…
A weakness has been identified in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. Impacted is an unknown function of the file /admin/index.php/datafile/delfile. This manipulation of the argument filename causes path traversal. The attack is…
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2025-64721 Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.6 and below, the SYSTEM-level service SbieSvc.exe exposes… |
Krytyczne sygnałyPubliczny PoC |
CVSS 10,0EPSS 0,72 % | ||
| CVE-2025-66419 MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and escalate privileges under certain… |
Wysoki priorytet |
CVSS 10,0EPSS 0,31 % | ||
| CVE-2024-58308 Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form. Attackers can inject specific SQL… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,67 % | ||
| CVE-2024-58309 xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting malicious SQL code through the msgid… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,58 % | ||
| CVE-2024-58298 Luka w Compuware iStrobe Web umożliwia zdalne wykonanie kodu przez nieautoryzowanych użytkowników. |
Wysoki priorytet |
CVSS 9,2EPSS 1 % | ||
| CVE-2024-58301 Purei CMS 1.0 contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through unfiltered user input parameters. Attackers can exploit… |
Wysoki priorytet |
CVSS 9,3EPSS 0,3 % | ||
| CVE-2024-58290 Wstrzyknięcie SQL w Xhibiter NFT Marketplace umożliwia manipulację danymi w bazie. |
Wysoki priorytet |
CVSS 9,3EPSS 0,36 % | ||
| CVE-2024-58286 Wykonanie zdalnego kodu w dizqueTV umożliwia atakującym wstrzykiwanie poleceń przez ustawienia ścieżki. |
Wysoki priorytet |
CVSS 9,3EPSS 1,37 % | ||
| CVE-2025-66589 Błąd odczytu poza granicami w AzeoTech DAQFactory może prowadzić do ujawnienia informacji lub awarii systemu. |
Wysoki priorytet |
CVSS 9,1EPSS 0,35 % | ||
| CVE-2025-66590 Przepełnienie bufora w AzeoTech DAQFactory umożliwia zdalne wykonanie kodu. |
Wysoki priorytet |
CVSS 9,8EPSS 0,38 % | ||
| CVE-2025-66588 Wykorzystanie niezinicjalizowanego wskaźnika w AzeoTech DAQFactory pozwala na zdalne wykonanie kodu. |
Wysoki priorytet |
CVSS 9,8EPSS 0,3 % | ||
| CVE-2025-14537 A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /preview7.php. This manipulation… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,42 % | ||
| CVE-2025-36937 Błąd w AudioDecoder::HandleProduceRequest umożliwia zdalne wykonanie kodu bez interakcji użytkownika. |
Wysoki priorytet |
CVSS 9,8EPSS 0,27 % | ||
| CVE-2025-14536 A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,65 % | ||
| CVE-2025-14529 A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The affected element is an unknown function of the file /admin/admin_running.php. This manipulation of the… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,51 % | ||
| CVE-2025-66048 Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,71 % | ||
| CVE-2025-65474 An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,54 % | ||
| CVE-2025-66043 Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,71 % | ||
| CVE-2025-66044 Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,55 % | ||
| CVE-2025-66045 Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,55 % | ||
| CVE-2025-66046 Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,55 % | ||
| CVE-2025-66047 Several stack-based buffer overflow vulnerabilities exists in the MFER parsing functionality of The Biosig Project libbiosig 3.9.1. A specially crafted MFER file can lead to arbitrary code… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,55 % | ||
| CVE-2025-65473 An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary code via… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,1EPSS 0,57 % | ||
| CVE-2025-14527 A weakness has been identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /view_book.php. Executing a manipulation of the… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,39 % | ||
| CVE-2025-14520 A weakness has been identified in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. Impacted is an unknown function of the file /admin/index.php/datafile/delfile. This… |
Wysoki priorytet |
CVSS 9,1EPSS 0,64 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 12.11.2026, 03:02 UTC – 12.11.2026, 08:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.