KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Wykrycie wskaźnika null w Tapo C100/C101 V5 prowadzi do awarii usługi i rebootu urządzenia.
Błąd w russh przed wersją 0.62.5 umożliwia nieautoryzowane wywołanie callbacków dla nieotwartych kanałów.
Plane contains a multi‑tenant authorization flaw in its asset‑management API that allows authenticated users from one workspace to access, delete, or duplicate assets belonging to another workspace by providing only the victim workspace slug and asset ID. The affected endpoints return presigned…
Brak walidacji referencji w operatorze ECK pozwala na nieautoryzowany dostęp do sekretów z innych namespace'ów.
Obejście uwierzytelnienia w wtyczce Stream dla WordPressa umożliwia dostęp do wszystkich rekordów aktywności.
Niepełna ochrona przed SSRF w IBM Langflow umożliwia atakującym wykonywanie zdalnych żądań.
Wykorzystanie podatności w IBM WebSphere Application Server - Liberty prowadzi do odmowy usługi.
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft…
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Usunięcie pliku .readonly w Combodo iTop umożliwia nieautoryzowane modyfikacje.
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy.
Luka w Oracle WebCenter Sites pozwala na nieautoryzowany dostęp do danych przez atakującego.
Improper Input Validation vulnerability in Apache Camel Mail component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. CVE-2026-46584 addressed mail headers reaching the Exchange without passing through a header filter, but the MimeMultipart data format…
Wstrzyknięcie CSS w WeasyPrint umożliwia atakującym wstrzykiwanie nieautoryzowanych deklaracji CSS.
Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability…
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of…
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One…
Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Email Center.…
Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner…
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful…
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. Successful attacks of this…
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having None privilege with network access via HTTP to compromise RDBMS. Successful attacks of this…
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging). Supported versions that are affected are 21.12.0-21.12.17, 22.12.0-22.12.15, 23.12.0-23.12.16, 24.12.0-24.12.16 and 25.12.0-25.12.9. Easily exploitable vulnerability allows low privileged…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Wykrycie wskaźnika null w Tapo C100/C101 V5 prowadzi do awarii usługi i rebootu urządzenia. | Wykrycie wskaźnika null w Tapo C100/C101 V5 prowadzi do awarii usługi i rebootu urządzenia. |
Do wiadomości | 6,5 | 0,38 % | ||
| Błąd w russh przed wersją 0.62.5 umożliwia nieautoryzowane wywołanie callbacków dla nieotwartych kanałów. | Błąd w russh przed wersją 0.62.5 umożliwia nieautoryzowane wywołanie callbacków dla nieotwartych kanałów. |
Do wiadomości | 6,5 | 0,38 % | ||
| Plane contains a multi‑tenant authorization flaw in its asset‑management API that allows authenticated users from one workspace to access,… | Plane contains a multi‑tenant authorization flaw in its asset‑management API that allows authenticated users from one workspace to access, delete, or duplicate assets belonging to another workspace by providing only the victim workspace slug and asset ID. The affected endpoints return presigned… |
Do wiadomości | 6,5 | 0,38 % | ||
| Brak walidacji referencji w operatorze ECK pozwala na nieautoryzowany dostęp do sekretów z innych namespace'ów. | Brak walidacji referencji w operatorze ECK pozwala na nieautoryzowany dostęp do sekretów z innych namespace'ów. |
Do wiadomości | 6,5 | 0,38 % | ||
| Obejście uwierzytelnienia w wtyczce Stream dla WordPressa umożliwia dostęp do wszystkich rekordów aktywności. | Obejście uwierzytelnienia w wtyczce Stream dla WordPressa umożliwia dostęp do wszystkich rekordów aktywności. |
Do wiadomości | 6,5 | 0,38 % | ||
| Niepełna ochrona przed SSRF w IBM Langflow umożliwia atakującym wykonywanie zdalnych żądań. | Niepełna ochrona przed SSRF w IBM Langflow umożliwia atakującym wykonywanie zdalnych żądań. |
Do wiadomości | 6,5 | 0,38 % | ||
| Wykorzystanie podatności w IBM WebSphere Application Server - Liberty prowadzi do odmowy usługi. | Wykorzystanie podatności w IBM WebSphere Application Server - Liberty prowadzi do odmowy usługi. |
Do wiadomości | 6,5 | 0,37 % | ||
| Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions. | Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions. |
Do wiadomości | 6,5 | 0,37 % | ||
| Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft… |
Do wiadomości | 6,5 | 0,37 % | ||
| Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin… | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
Do wiadomości | 6,5 | 0,37 % | ||
| Usunięcie pliku .readonly w Combodo iTop umożliwia nieautoryzowane modyfikacje. | Usunięcie pliku .readonly w Combodo iTop umożliwia nieautoryzowane modyfikacje. |
Do wiadomości | 6,5 | 0,37 % | ||
| Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle… |
Do wiadomości | 6,5 | 0,37 % | ||
| A permissions issue was addressed with improved validation. | A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy. |
Do wiadomości | 6,5 | 0,37 % | ||
| Luka w Oracle WebCenter Sites pozwala na nieautoryzowany dostęp do danych przez atakującego. | Luka w Oracle WebCenter Sites pozwala na nieautoryzowany dostęp do danych przez atakującego. |
Do wiadomości | 6,5 | 0,37 % | ||
| Improper Input Validation vulnerability in Apache Camel Mail component. | Improper Input Validation vulnerability in Apache Camel Mail component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. CVE-2026-46584 addressed mail headers reaching the Exchange without passing through a header filter, but the MimeMultipart data format… |
Do wiadomości | 6,5 | 0,37 % | ||
| Wstrzyknięcie CSS w WeasyPrint umożliwia atakującym wstrzykiwanie nieautoryzowanych deklaracji CSS. | Wstrzyknięcie CSS w WeasyPrint umożliwia atakującym wstrzykiwanie nieautoryzowanych deklaracji CSS. |
Do wiadomości | 6,5 | 0,37 % | ||
| Vulnerability in Oracle REST Data Services (component: Graph QL). | Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability… |
Do wiadomości | 6,5 | 0,37 % | ||
| Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks of… |
Do wiadomości | 6,5 | 0,37 % | ||
| Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle One-to-One… |
Do wiadomości | 6,5 | 0,37 % | ||
| Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). | Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Email Center.… |
Do wiadomości | 6,5 | 0,37 % | ||
| Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Partner… |
Do wiadomości | 6,5 | 0,37 % | ||
| Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payroll. Successful… |
Do wiadomości | 6,5 | 0,37 % | ||
| Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). | Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trusted Answer Search. Successful attacks of this… |
Do wiadomości | 6,5 | 0,37 % | ||
| Vulnerability in the RDBMS component of Oracle Database Server. | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having None privilege with network access via HTTP to compromise RDBMS. Successful attacks of this… |
Do wiadomości | 6,5 | 0,37 % | ||
| Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging). | Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging). Supported versions that are affected are 21.12.0-21.12.17, 22.12.0-22.12.15, 23.12.0-23.12.16, 24.12.0-24.12.16 and 25.12.0-25.12.9. Easily exploitable vulnerability allows low privileged… |
Do wiadomości | 6,5 | 0,37 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.