KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, match_origin/1 returned the bare reflected Origin and allowed credentials even when the wildcard "" was configured, so the response echoed the attacker's…
A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote attacker can open RDP connections without completing the handshake and retain the connection-throttling slots indefinitely because no pre-authentication handshake deadline…
Shop manager PHP Object Injection in Reycob Product Import Export <= 2.3.0 versions.
Unauthenticated Broken Access Control in Loops & Logic <= 4.2.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Core Web Vitals & PageSpeed Booster <= 1.0.31 versions.
Unauthenticated Cross Site Scripting (XSS) in Calculated Fields Form <= 5.5.1.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions.
Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions.
Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions.
Administrator SQL Injection in Email Log <= 2.63 versions.
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions.
An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a <select> element that triggers requestFullscreen without displaying the fullscreen notification.
Contributor SQL Injection in WP EasyCart <= 5.9.4 versions.
Unauthenticated Cross Site Scripting (XSS) in WPS Limit Login <= 1.5.9.3 versions.
Contributor SQL Injection in Mollie Forms <= 2.11.0 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions.
Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.4 versions.
Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions.
LimeSurvey Community Edition 7.0.14 contains a reflected cross-site scripting vulnerability on the administrative survey-participant CSV import result page.
Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 - The media deletion endpoint (administrator/index.php?option=com_easystore&task=media.deleteImage) parsed the ids…
Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 - The coupon bulk update task (administrator/index.php?option=com_easystore&task=coupon.couponBulkUpdate) took input IDs and…
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-66070 RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.17, 4.0.22, 4.1.13, and 4.2.6, match_origin/1 returned the bare reflected Origin and allowed credentials even when the… |
Monitoruj |
CVSS 8,8EPSS 0,37 % | ||
| CVE-2026-96541 A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote attacker can open RDP connections without completing the handshake and retain the… |
Monitoruj |
CVSS 7,5EPSS 0,91 % | ||
| CVE-2026-95603 Shop manager PHP Object Injection in Reycob Product Import Export <= 2.3.0 versions. |
Monitoruj |
CVSS 7,2EPSS 0,54 % | ||
| CVE-2026-95604 Unauthenticated Broken Access Control in Loops & Logic <= 4.2.4 versions. |
Monitoruj |
CVSS 7,5EPSS 0,44 % | ||
| CVE-2026-95528 Unauthenticated Cross Site Scripting (XSS) in Core Web Vitals & PageSpeed Booster <= 1.0.31 versions. |
Monitoruj |
CVSS 7,1EPSS 0,25 % | ||
| CVE-2026-95529 Unauthenticated Cross Site Scripting (XSS) in Calculated Fields Form <= 5.5.1.1 versions. |
Monitoruj |
CVSS 7,1EPSS 0,25 % | ||
| CVE-2026-95590 Subscriber SQL Injection in Tainacan <= 1.2.0 versions. |
Monitoruj |
CVSS 7,1EPSS 0,29 % | ||
| CVE-2026-95593 Editor SQL Injection in Ultimeter <= 3.0.8 versions. |
Monitoruj |
CVSS 7,6EPSS 0,38 % | ||
| CVE-2026-95515 Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions. |
Monitoruj |
CVSS 7,1EPSS 0,19 % | ||
| CVE-2026-95522 Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions. |
Monitoruj |
CVSS 7,6EPSS 0,38 % | ||
| CVE-2026-95513 Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 versions. |
Monitoruj |
CVSS 7,5EPSS 0,35 % | ||
| CVE-2026-94487 Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions. |
Monitoruj |
CVSS 8,1EPSS 0,13 % | ||
| CVE-2026-94174 Administrator SQL Injection in Email Log <= 2.63 versions. |
Monitoruj |
CVSS 7,6EPSS 0,38 % | ||
| CVE-2026-94176 Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions. |
Monitoruj |
CVSS 7,1EPSS 0,25 % | ||
| CVE-2026-94179 Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions. |
Monitoruj |
CVSS 7,1EPSS 0,25 % | ||
| CVE-2026-94181 An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a <select> element that triggers requestFullscreen without displaying… |
Monitoruj |
CVSS 7,4EPSS 0,34 % | ||
| CVE-2026-94124 Contributor SQL Injection in WP EasyCart <= 5.9.4 versions. |
Monitoruj |
CVSS 8,5EPSS 0,22 % | ||
| CVE-2026-93622 Unauthenticated Cross Site Scripting (XSS) in WPS Limit Login <= 1.5.9.3 versions. |
Monitoruj |
CVSS 7,1EPSS 0,25 % | ||
| CVE-2026-93773 Contributor SQL Injection in Mollie Forms <= 2.11.0 versions. |
Monitoruj |
CVSS 8,5EPSS 0,36 % | ||
| CVE-2026-93774 Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions. |
Monitoruj |
CVSS 7,1EPSS 0,25 % | ||
| CVE-2026-93526 Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.4 versions. |
Monitoruj |
CVSS 7,1EPSS 0,25 % | ||
| CVE-2026-93527 Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions. |
Monitoruj |
CVSS 8,5EPSS 0,36 % | ||
| CVE-2026-92730 LimeSurvey Community Edition 7.0.14 contains a reflected cross-site scripting vulnerability on the administrative survey-participant CSV import result page. |
Monitoruj |
CVSS 7,4EPSS 0,53 % | ||
| CVE-2026-90901 Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0 - The media deletion endpoint… |
Monitoruj |
CVSS 8,6EPSS 0,37 % | ||
| CVE-2026-90902 Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0 - The coupon bulk update task… |
Monitoruj |
CVSS 8,6EPSS 0,28 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 6.11.2026, 11:02 UTC – 6.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.