Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Quantum Security Gateway / Quantum Security Management | Check Point Multiple Products Incorrect Permission Assignment for Critical Resource Vulnerability Check Point Firewall, Multi-Domain Security Management Server, Scalable Platforms, Security Gateway, and Security Management Server contain an incorrect permissions assignment for critical resources vulnerability when the Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local… |
7,8 | 2,19 % | Tak | |
| Microsoft 365 Apps for Enterprise / Microsoft Office LTSC 2021 / Microsoft Office LTSC 2024 | Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network. |
6,5 | 1,62 % | Tak | |
| Chrome | Google Chromium Use-After-Free Vulnerability Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to,… |
8,8 | 0,96 % | Tak | |
| WidzialniCMS | CVE-2026-110468 WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the currentpath parameter, an unauthenticated attacker can upload arbitrary files to any locations on the… |
10,0 | 0,64 % | Brak wpisu w KEV nie wyklucza ataków | |
| WidzialniCMS | CVE-2026-110469 WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the uploadPath parameter, an unauthenticated attacker can upload arbitrary files to any locations on the server, leading to… |
10,0 | 0,7 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 14.11.2026, 19:02 UTC – 15.11.2026, 00:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.