CVE-2026-80442
Wstrzyknięcie poleceń w IBM Guardium Data Protection umożliwia wykonanie nieautoryzowanych komend.
MonitorujSkrót PL
- CVSS
- 8,8
- EPSS
- 0,65 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Dotkliwość: Wysoka
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
CVE-2026-81623
Nieprawidłowa walidacja danych w IBM Guardium Data Protection umożliwia wykonanie dowolnych poleceń przez uwierzytelnionego użytkownika.
MonitorujSkrót PL
- CVSS
- 8,8
- EPSS
- 0,34 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-81626
Wstrzyknięcie SQL w IBM Guardium Data Protection umożliwia nieautoryzowany dostęp do danych.
MonitorujSkrót PL
- CVSS
- 8,6
- EPSS
- 0,37 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-81656
Wstrzyknięcie SQL w IBM Guardium Data Protection umożliwia nieautoryzowany dostęp do danych.
MonitorujSkrót PL
- CVSS
- 8,8
- EPSS
- 0,44 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-75895
In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption.
MonitorujOpis źródłowy · EN
- CVSS
- 7,5
- EPSS
- 0,43 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-61820
pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, inherit_template_properties() manually surrounds primary-key column names from pg_attribute.attname with double quotes without escaping embedded double-quote…
MonitorujOpis źródłowy · EN
- CVSS
- 8,5
- EPSS
- 0,73 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-61821
pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, drop_partition_id() and drop_partition_time() use part_config.retention_schema as the target for ALTER TABLE SET SCHEMA and accept any nonempty schema name. A…
MonitorujOpis źródłowy · EN
- CVSS
- 8,5
- EPSS
- 0,38 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-61817
pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance(), show_partitions(), show_partition_info(), undo_partition(), and partition_data_time() interpolate the writable part_config.time_dncoder…
MonitorujOpis źródłowy · EN
- CVSS
- 8,5
- EPSS
- 0,73 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-61818
pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() reads part_config.time_encoder as unrestricted text and interpolates it without identifier quoting into a dynamically executed SELECT…
MonitorujOpis źródłowy · EN
- CVSS
- 8,5
- EPSS
- 0,51 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-61819
pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, when pg_jobmon is installed and part_config.jobmon is true, exception handlers in multiple pg_partman functions place p_parent_table verbatim inside a SQL…
MonitorujOpis źródłowy · EN
- CVSS
- 8,5
- EPSS
- 0,73 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-61714
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index _fluid_player_t::channel_isplaying outside its fixed-size heap allocation while…
MonitorujOpis źródłowy · EN
- CVSS
- 7,8
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-61721
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loop_start and wsmp.loop_length values to samples without calling fluid_sample_validate() or…
MonitorujOpis źródłowy · EN
- CVSS
- 8,0
- EPSS
- 0,19 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-17619
IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
MonitorujOpis źródłowy · EN
- CVSS
- 8,6
- EPSS
- 0,42 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-11727
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of queue manager responses when requesting AMS policy data.
MonitorujOpis źródłowy · EN
- CVSS
- 8,1
- EPSS
- 0,61 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-11725
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing.
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,59 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-11726
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header offset values.
MonitorujOpis źródłowy · EN
- CVSS
- 8,1
- EPSS
- 0,46 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-11716
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster migration data.
MonitorujOpis źródłowy · EN
- CVSS
- 7,5
- EPSS
- 0,45 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2017-20284
Caucho Resin contains a path traversal vulnerability in the documentation webapp (resin-doc) that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig…
MonitorujOpis źródłowy · EN
- CVSS
- 7,5
- EPSS
- 1,17 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-93852
In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/leases) returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate…
MonitorujOpis źródłowy · EN
- CVSS
- 7,1
- EPSS
- 0,37 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-93854
In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations (PUT /v2/leases/{lease_id} and DELETE /v2/leases/{lease_id}). The policy authorize() wrapper attempts to load the target lease…
MonitorujOpis źródłowy · EN
- CVSS
- 7,2
- EPSS
- 0,41 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-75893
In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg() function via IPA frame lengths.
MonitorujOpis źródłowy · EN
- CVSS
- 7,5
- EPSS
- 0,46 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-75894
In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.
MonitorujOpis źródłowy · EN
- CVSS
- 7,5
- EPSS
- 0,31 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2021-48008
Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the site_id GET parameter in the webservice endpoint. Attackers can exploit the lack of input sanitization or…
MonitorujOpis źródłowy · EN
- CVSS
- 8,7
- EPSS
- 0,57 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2019-25776
Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious input through the userIdentifiers GET parameter in the mobile plugin endpoint. Attackers can bypass…
MonitorujOpis źródłowy · EN
- CVSS
- 8,7
- EPSS
- 0,6 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-93763
A protection mechanism failure in the object-document mapper's encryption configuration generation can cause fields that an application declared for client-side field-level encryption to be written and kept in cleartext, without any error or warning. A party…
MonitorujOpis źródłowy · EN
- CVSS
- 7,1
- EPSS
- 0,15 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-80442 Wstrzyknięcie poleceń w IBM Guardium Data Protection umożliwia wykonanie nieautoryzowanych komend. |
Monitoruj |
CVSS 8,8EPSS 0,65 % | ||
| CVE-2026-81623 Nieprawidłowa walidacja danych w IBM Guardium Data Protection umożliwia wykonanie dowolnych poleceń przez uwierzytelnionego użytkownika. |
Monitoruj |
CVSS 8,8EPSS 0,34 % | ||
| CVE-2026-81626 Wstrzyknięcie SQL w IBM Guardium Data Protection umożliwia nieautoryzowany dostęp do danych. |
Monitoruj |
CVSS 8,6EPSS 0,37 % | ||
| CVE-2026-81656 Wstrzyknięcie SQL w IBM Guardium Data Protection umożliwia nieautoryzowany dostęp do danych. |
Monitoruj |
CVSS 8,8EPSS 0,44 % | ||
| CVE-2026-75895 In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption. |
Monitoruj |
CVSS 7,5EPSS 0,43 % | ||
| CVE-2026-61820 pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, inherit_template_properties() manually surrounds primary-key column names from… |
Monitoruj |
CVSS 8,5EPSS 0,73 % | ||
| CVE-2026-61821 pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, drop_partition_id() and drop_partition_time() use part_config.retention_schema as the… |
Monitoruj |
CVSS 8,5EPSS 0,38 % | ||
| CVE-2026-61817 pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance(), show_partitions(), show_partition_info(), undo_partition(), and… |
Monitoruj |
CVSS 8,5EPSS 0,73 % | ||
| CVE-2026-61818 pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() reads part_config.time_encoder as unrestricted text and interpolates it… |
Monitoruj |
CVSS 8,5EPSS 0,51 % | ||
| CVE-2026-61819 pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, when pg_jobmon is installed and part_config.jobmon is true, exception handlers in… |
Monitoruj |
CVSS 8,5EPSS 0,73 % | ||
| CVE-2026-61714 FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index… |
Monitoruj |
CVSS 7,8EPSS 0,14 % | ||
| CVE-2026-61721 FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loop_start and wsmp.loop_length… |
Monitoruj |
CVSS 8,0EPSS 0,19 % | ||
| CVE-2026-17619 IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information… |
Monitoruj |
CVSS 8,6EPSS 0,42 % | ||
| CVE-2026-11727 IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of… |
Monitoruj |
CVSS 8,1EPSS 0,61 % | ||
| CVE-2026-11725 IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer overflow in MQINQ request processing. |
Monitoruj |
CVSS 8,8EPSS 0,59 % | ||
| CVE-2026-11726 IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message… |
Monitoruj |
CVSS 8,1EPSS 0,46 % | ||
| CVE-2026-11716 IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to… |
Monitoruj |
CVSS 7,5EPSS 0,45 % | ||
| CVE-2017-20284 Caucho Resin contains a path traversal vulnerability in the documentation webapp (resin-doc) that allows remote unauthenticated attackers to read arbitrary files by supplying a relative… |
Monitoruj |
CVSS 7,5EPSS 1,17 % | ||
| CVE-2026-93852 In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/leases) returns leases for every project without enforcing project scoping or an administrator-only policy. Any… |
Monitoruj |
CVSS 7,1EPSS 0,37 % | ||
| CVE-2026-93854 In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations (PUT /v2/leases/{lease_id} and DELETE… |
Monitoruj |
CVSS 7,2EPSS 0,41 % | ||
| CVE-2026-75893 In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg() function via IPA frame lengths. |
Monitoruj |
CVSS 7,5EPSS 0,46 % | ||
| CVE-2026-75894 In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of… |
Monitoruj |
CVSS 7,5EPSS 0,31 % | ||
| CVE-2021-48008 Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the site_id GET parameter in the… |
Monitoruj |
CVSS 8,7EPSS 0,57 % | ||
| CVE-2019-25776 Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious input through the… |
Monitoruj |
CVSS 8,7EPSS 0,6 % | ||
| CVE-2026-93763 A protection mechanism failure in the object-document mapper's encryption configuration generation can cause fields that an application declared for client-side field-level encryption to… |
Monitoruj |
CVSS 7,1EPSS 0,15 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 12.11.2026, 11:02 UTC – 12.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.