KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add DIRECT_MAP_PHYSMEM_END definition get_free_mem_region() and mhp_get_pluggable_range() bound their search to DIRECT_MAP_PHYSMEM_END. LoongArch does not define it, so the…
In the Linux kernel, the following vulnerability has been resolved: nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry The hand-rolled seqcount-like protocol in nfsd_nl_rpc_status_get_dumpit() is missing a read memory barrier (smp_rmb)…
In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsd_net boolean flags to unsigned long flags word nfsd_net contains several boolean fields that are accessed from concurrent contexts without serialization. In…
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix unmatched rn_unregister on failed accept When svc_rdma_accept() takes the errout path before rpcrdma_rn_register() has succeeded, the existing cleanup block calls…
In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95_usb_phy_get_tca() succeeds, the typec switch leaks because the only cleanup path was in .remove(),…
SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries.
MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an…
NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__pathArcTo() when parsing SVG arc commands. A specially crafted SVG document containing extreme arc radius values can cause intermediate arc calculations to produce a NaN…
NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer's nsvg__addActive() function. A specially crafted SVG document containing sufficiently large geometry coordinates can cause fixed-point-scaled edge coordinates…
zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump().
An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in new_expr(). For arity-0 expression nodes, including constants, variables, and zero-argument functions, the function allocates less memory than sizeof(te_expr) but treats…
nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be cast to uint16_t or wider integer pointers and directly dereferenced…
The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial number sent in the clear on every read and is not intended to be secret or to…
BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, the certificate and timestamp CORS proxy in cloudflare/cors-proxy-worker.js uses isPrivateOrReservedHost() to validate a supplied hostname separately from the DNS resolution…
Błąd w RabbitMQ pozwala użytkownikowi monitorującemu na usuwanie lub restartowanie shoveli.
Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.31.0 until 1.42.0, the Account API handlers in packages/core/src/routes/account/third-party-tokens.ts allow a caller holding a same-user access token with only the openid scope…
phpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentication bypass in its public two-factor authentication verification flow: an unauthenticated attacker can submit an account’s numeric user ID and a valid or…
Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.43.0, Logto fetches administrator-controlled outbound destinations without validating the address used for the connection. Webhook delivery in…
HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a single crafted request. Attackers can trigger a hung serving thread that…
Wykorzystanie podatności w pulpcore pozwala na odczytanie plików z serwera, w tym klucza prywatnego.
Nieprawidłowa neutralizacja zmiennych środowiskowych w IBM DataStage umożliwia zdalne wykonanie dowolnych poleceń.
Niebezpieczna deserializacja w IBM DataStage umożliwia zdalne wykonanie kodu przez uwierzytelnionego napastnika.
Nieprawidłowe ograniczenie ścieżki w IBM DataStage umożliwia atakującemu zdalne przeglądanie katalogów.
Nieprawidłowe neutralizowanie specjalnych elementów w IBM DataStage umożliwia zdalne wykonanie kodu.
Nieprawidłowe przetwarzanie poleceń w IBM DataStage umożliwia zdalne wykonanie dowolnych komend.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-93237 In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add DIRECT_MAP_PHYSMEM_END definition get_free_mem_region() and mhp_get_pluggable_range() bound their… |
Monitoruj |
CVSS 7,8EPSS 0,17 % | ||
| CVE-2026-93229 In the Linux kernel, the following vulnerability has been resolved: nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry The hand-rolled seqcount-like protocol in… |
Monitoruj |
CVSS 7,1EPSS 0,13 % | ||
| CVE-2026-93221 In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsd_net boolean flags to unsigned long flags word nfsd_net contains several boolean fields that are… |
Monitoruj |
CVSS 8,1EPSS 0,42 % | ||
| CVE-2026-93224 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix unmatched rn_unregister on failed accept When svc_rdma_accept() takes the errout path… |
Monitoruj |
CVSS 8,1EPSS 0,45 % | ||
| CVE-2026-93225 In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95_usb_phy_get_tca() succeeds,… |
Monitoruj |
CVSS 7,4EPSS 0,14 % | ||
| CVE-2026-88361 SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries. |
Monitoruj |
CVSS 7,5EPSS 0,52 % | ||
| CVE-2026-88362 MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index… |
Monitoruj |
CVSS 7,5EPSS 0,42 % | ||
| CVE-2026-88366 NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in nsvg__pathArcTo() when parsing SVG arc commands. A specially crafted SVG document containing extreme arc… |
Monitoruj |
CVSS 7,5EPSS 0,4 % | ||
| CVE-2026-88368 NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer's nsvg__addActive() function. A specially crafted SVG document containing sufficiently… |
Monitoruj |
CVSS 7,5EPSS 0,39 % | ||
| CVE-2026-88369 zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump(). |
Monitoruj |
CVSS 7,3EPSS 0,27 % | ||
| CVE-2026-88355 An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in new_expr(). For arity-0 expression nodes, including constants, variables, and zero-argument… |
Monitoruj |
CVSS 7,5EPSS 0,42 % | ||
| CVE-2026-88357 nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code. Specially crafted network input can cause byte-buffer addresses at odd offsets to be… |
Monitoruj |
CVSS 7,5EPSS 0,6 % | ||
| CVE-2026-75907 The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial number… |
Monitoruj |
CVSS 7,5EPSS 0,46 % | ||
| CVE-2026-77581 BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, the certificate and timestamp CORS proxy in cloudflare/cors-proxy-worker.js uses… |
Monitoruj |
CVSS 8,6EPSS 0,27 % | ||
| CVE-2026-67233 Błąd w RabbitMQ pozwala użytkownikowi monitorującemu na usuwanie lub restartowanie shoveli. |
Monitoruj |
CVSS 7,1EPSS 0,3 % | ||
| CVE-2026-63203 Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.31.0 until 1.42.0, the Account API handlers in packages/core/src/routes/account/third-party-tokens.ts… |
Monitoruj |
CVSS 7,6EPSS 0,31 % | ||
| CVE-2026-56737 phpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentication bypass in its public two-factor authentication verification flow: an unauthenticated… |
Monitoruj |
CVSS 8,1EPSS 0,53 % | ||
| CVE-2026-56739 Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.43.0, Logto fetches administrator-controlled outbound destinations without validating the address used… |
Monitoruj |
CVSS 8,5EPSS 0,3 % | ||
| CVE-2026-97362 HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a single… |
Monitoruj |
CVSS 8,7EPSS 0,29 % | ||
| CVE-2026-90959 Wykorzystanie podatności w pulpcore pozwala na odczytanie plików z serwera, w tym klucza prywatnego. |
Monitoruj |
CVSS 8,1EPSS 0,41 % | ||
| CVE-2026-81552 Nieprawidłowa neutralizacja zmiennych środowiskowych w IBM DataStage umożliwia zdalne wykonanie dowolnych poleceń. |
Monitoruj |
CVSS 8,8EPSS 0,77 % | ||
| CVE-2026-82093 Niebezpieczna deserializacja w IBM DataStage umożliwia zdalne wykonanie kodu przez uwierzytelnionego napastnika. |
Monitoruj |
CVSS 8,8EPSS 0,42 % | ||
| CVE-2026-82094 Nieprawidłowe ograniczenie ścieżki w IBM DataStage umożliwia atakującemu zdalne przeglądanie katalogów. |
Monitoruj |
CVSS 7,1EPSS 0,31 % | ||
| CVE-2026-81539 Nieprawidłowe neutralizowanie specjalnych elementów w IBM DataStage umożliwia zdalne wykonanie kodu. |
Monitoruj |
CVSS 8,8EPSS 0,45 % | ||
| CVE-2026-81545 Nieprawidłowe przetwarzanie poleceń w IBM DataStage umożliwia zdalne wykonanie dowolnych komend. |
Monitoruj |
CVSS 8,8EPSS 0,88 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 6.11.2026, 07:02 UTC – 6.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.