KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's callback. A password callback that returns a value larger than the buffer…
Missing JWT signature verification in AWS Ops Wheel allows unauthenticated attackers to forge JWT tokens and gain unintended administrative access to the application, including the ability to read, modify, and delete all application data across tenants and…
BridgeHead FileStore versions prior to 24A (released in early 2024) expose the Apache Axis2 administration module on network-accessible endpoints with default credentials that allows unauthenticated remote attackers to execute arbitrary OS commands.…
In the Linux kernel, the following vulnerability has been resolved: seg6: separate dst_cache for input and output paths in seg6 lwtunnel The seg6 lwtunnel uses a single dst_cache per encap route, shared between seg6_input_core() and seg6_output_core().…
Błąd użycia po zwolnieniu pamięci w jądrze Linux umożliwia zdalne wykonanie kodu.
Błąd w kernelu Linux umożliwia niebezpieczne odwołania do wskaźników, co może prowadzić do awarii systemu.
In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject oversized global TT response buffers batadv_tt_prepare_tvlv_global_data() builds the allocation length for a global TT response in 16-bit temporaries. When a remote…
Przepełnienie bufora w jądrze Linuxa umożliwia ujawnienie pamięci jądra i potencjalną korupcję.
Błąd w jądrze Linuxa pozwala na przetwarzanie nieprawidłowych biletów RXKAD, co może prowadzić do ataków.
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix integer overflow in rxgk_verify_response() In rxgk_verify_response(), there's a potential integer overflow due to rounding up token_len before checking it, thereby allowing the…
In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix RESPONSE authenticator parser OOB read rxgk_verify_authenticator() copies auth_len bytes into a temporary buffer and then passes p + auth_len as the parser limit…
Podwójne zwolnienie pamięci w jądrze Linux w SMB może prowadzić do awarii systemu.
Podwójne zwolnienie pamięci w jądrze Linux w funkcji smbd_free_send_io() może prowadzić do awarii systemu.
Błąd w jądrze Linux umożliwia wykorzystanie po zwolnieniu pamięci, prowadząc do niebezpiecznego dostępu.
In the Linux kernel, the following vulnerability has been resolved: smb: server: let send_done handle a completion without IB_SEND_SIGNALED With smbdirect_send_batch processing we likely have requests without IB_SEND_SIGNALED, which will be destroyed in…
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the URL ends with Authentication with certain function calls. This bypass allows assigning arbitrary…
Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network.
Brak sprawdzania długości bufora w Delta Electronics AS320T umożliwia zdalne wykonanie kodu.
Brak sprawdzania długości bufora w Delta Electronics AS320T umożliwia zdalne wykonanie kodu.
Błąd obliczania rozmiaru bufora w Delta Electronics AS320T umożliwia zdalne wykonanie kodu.
Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.18.0-rc1, 1.17.2-rc1, and 1.16.4, Kyverno's apiCall feature in ClusterPolicy automatically attaches the admission controller's ServiceAccount token to…
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the haproxy_section_save interface presents a vulnerability that could lead to remote code execution due to path traversal and writing into…
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 8.2.6.4 have a SQL injection vulnerability in the haproxy_section_save function in app/routes/config/routes.py. The server_ip parameter, sourced from the…
A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with network access to the device may be able to bypass the intended…
A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values within browser-executed scripts rather than server-side verification. An attacker with access…
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-41677 rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's… |
Wysoki priorytet |
CVSS 9,1EPSS 0,29 % | ||
| CVE-2026-6911 Missing JWT signature verification in AWS Ops Wheel allows unauthenticated attackers to forge JWT tokens and gain unintended administrative access to the application, including the ability… |
Wysoki priorytet |
CVSS 9,3EPSS 0,25 % | ||
| CVE-2026-39920 BridgeHead FileStore versions prior to 24A (released in early 2024) expose the Apache Axis2 administration module on network-accessible endpoints with default credentials that allows… |
Wysoki priorytet |
CVSS 9,3EPSS 0,54 % | ||
| CVE-2026-31668 In the Linux kernel, the following vulnerability has been resolved: seg6: separate dst_cache for input and output paths in seg6 lwtunnel The seg6 lwtunnel uses a single dst_cache per… |
Wysoki priorytet |
CVSS 9,8EPSS 0,44 % | ||
| CVE-2026-31669 Błąd użycia po zwolnieniu pamięci w jądrze Linux umożliwia zdalne wykonanie kodu. |
Wysoki priorytet |
CVSS 9,8EPSS 0,47 % | ||
| CVE-2026-31657 Błąd w kernelu Linux umożliwia niebezpieczne odwołania do wskaźników, co może prowadzić do awarii systemu. |
Wysoki priorytet |
CVSS 9,8EPSS 0,4 % | ||
| CVE-2026-31659 In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject oversized global TT response buffers batadv_tt_prepare_tvlv_global_data() builds the allocation… |
Wysoki priorytet |
CVSS 9,8EPSS 0,42 % | ||
| CVE-2026-31649 Przepełnienie bufora w jądrze Linuxa umożliwia ujawnienie pamięci jądra i potencjalną korupcję. |
Wysoki priorytet |
CVSS 9,8EPSS 0,46 % | ||
| CVE-2026-31637 Błąd w jądrze Linuxa pozwala na przetwarzanie nieprawidłowych biletów RXKAD, co może prowadzić do ataków. |
Wysoki priorytet |
CVSS 9,8EPSS 0,59 % | ||
| CVE-2026-31633 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix integer overflow in rxgk_verify_response() In rxgk_verify_response(), there's a potential integer overflow… |
Wysoki priorytet |
CVSS 9,8EPSS 0,47 % | ||
| CVE-2026-31636 In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix RESPONSE authenticator parser OOB read rxgk_verify_authenticator() copies auth_len bytes into a… |
Wysoki priorytet |
CVSS 9,1EPSS 0,44 % | ||
| CVE-2026-31608 Podwójne zwolnienie pamięci w jądrze Linux w SMB może prowadzić do awarii systemu. |
Wysoki priorytet |
CVSS 9,8EPSS 0,46 % | ||
| CVE-2026-31609 Podwójne zwolnienie pamięci w jądrze Linux w funkcji smbd_free_send_io() może prowadzić do awarii systemu. |
Wysoki priorytet |
CVSS 9,8EPSS 0,46 % | ||
| CVE-2026-31589 Błąd w jądrze Linux umożliwia wykorzystanie po zwolnieniu pamięci, prowadząc do niebezpiecznego dostępu. |
Wysoki priorytet |
CVSS 9,8EPSS 0,44 % | ||
| CVE-2026-31536 In the Linux kernel, the following vulnerability has been resolved: smb: server: let send_done handle a completion without IB_SEND_SIGNALED With smbdirect_send_batch processing we likely… |
Wysoki priorytet |
CVSS 9,8EPSS 0,44 % | ||
| CVE-2026-25660 CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the URL ends with Authentication… |
Wysoki priorytet |
CVSS 9,8EPSS 0,45 % | ||
| CVE-2026-21515 Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network. |
Wysoki priorytet |
CVSS 9,9EPSS 0,7 % | ||
| CVE-2026-1951 Brak sprawdzania długości bufora w Delta Electronics AS320T umożliwia zdalne wykonanie kodu. |
Wysoki priorytet |
CVSS 9,8EPSS 0,61 % | ||
| CVE-2026-1950 Brak sprawdzania długości bufora w Delta Electronics AS320T umożliwia zdalne wykonanie kodu. |
Wysoki priorytet |
CVSS 9,8EPSS 0,31 % | ||
| CVE-2026-1949 Błąd obliczania rozmiaru bufora w Delta Electronics AS320T umożliwia zdalne wykonanie kodu. |
Wysoki priorytet |
CVSS 9,8EPSS 0,61 % | ||
| CVE-2026-41323 Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.18.0-rc1, 1.17.2-rc1, and 1.16.4, Kyverno's apiCall feature in ClusterPolicy… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,1EPSS 0,56 % | ||
| CVE-2026-33076 Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Prior to version 8.2.6.4, the haproxy_section_save interface presents a vulnerability that could lead… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,82 % | ||
| CVE-2026-33078 Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 8.2.6.4 have a SQL injection vulnerability in the haproxy_section_save function in… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,35 % | ||
| CVE-2026-40630 A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement. An attacker with… |
Wysoki priorytet |
CVSS 9,3EPSS 0,73 % | ||
| CVE-2026-35503 A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values within browser-executed… |
Wysoki priorytet |
CVSS 9,3EPSS 0,55 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 4.11.2026, 21:31 UTC – 4.11.2026, 23:03 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.