Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Muzicon | CVE-2026-62005 Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions. |
9,8 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Nuts | CVE-2026-62006 Unauthenticated PHP Object Injection in Nuts <= 1.12 versions. |
9,8 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| Orpheus | CVE-2026-62008 Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions. |
9,8 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| Filmax | CVE-2026-62009 Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions. |
9,8 | 0,43 % | Brak wpisu w KEV nie wyklucza ataków | |
| Avventure | CVE-2026-62010 Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions. |
9,8 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Bonbon | CVE-2026-62011 Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions. |
9,8 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Coinpress | CVE-2026-62012 Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions. |
9,8 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| Legal Stone | CVE-2026-61997 Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions. |
9,8 | 0,51 % | Brak wpisu w KEV nie wyklucza ataków | |
| Le Truffe | CVE-2026-61998 Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions. |
9,8 | 0,48 % | Brak wpisu w KEV nie wyklucza ataków | |
| Marcell | CVE-2026-62001 Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions. |
9,8 | 0,48 % | Brak wpisu w KEV nie wyklucza ataków | |
| Meals & Wheels | CVE-2026-62002 Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions. |
9,8 | 0,51 % | Brak wpisu w KEV nie wyklucza ataków | |
| Mission | CVE-2026-62003 Unauthenticated PHP Object Injection in Mission <= 1.22 versions. |
9,8 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| AjaxLoadMore Cache | CVE-2026-61991 Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions. |
10,0 | 0,75 % | Brak wpisu w KEV nie wyklucza ataków | |
| GEO my WordPress | CVE-2026-61992 Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions. |
9,8 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| Preservation | CVE-2026-54859 Unauthenticated PHP Object Injection in Preservation <= 1.15 versions. |
9,8 | 0,53 % | Brak wpisu w KEV nie wyklucza ataków | |
| Ozisti | CVE-2026-54860 Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions. |
9,8 | 0,49 % | Brak wpisu w KEV nie wyklucza ataków | |
| RexCoin | CVE-2026-54856 Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions. |
9,8 | 0,49 % | Brak wpisu w KEV nie wyklucza ataków | |
| Quirky | CVE-2026-54857 Unauthenticated PHP Object Injection in Quirky <= 1.23 versions. |
9,8 | 0,49 % | Brak wpisu w KEV nie wyklucza ataków | |
| Printy | CVE-2026-54858 Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions. |
9,8 | 0,49 % | Brak wpisu w KEV nie wyklucza ataków | |
| frappe | CVE-2026-119145 Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handling does not validate the destination path before writing to disk. Authenticated attackers can upload crafted files to locations outside the intended storage directory to achieve… |
9,4 | 0,76 % | Brak wpisu w KEV nie wyklucza ataków | |
| Langflow OSS | CVE-2026-18894 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are… |
9,8 | 0,52 % | Brak wpisu w KEV nie wyklucza ataków | |
| zitadel | CVE-2026-119128 ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to set the first credential of users lacking any authentication method. Attackers can compute a valid verificationCheck cookie from the user ID and browser… |
9,1 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| Advanced Authentication Server | CVE-2026-112256 Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8, from 6.5.0.0 through 6.5.0.10, and… |
9,2 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków | |
| P-Net | CVE-2026-111732 P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the ARVendorBlock request that is not part of the block definition and uses it as the number of bytes to copy into a fixed-size buffer, without comparing it with the buffer size or the… |
9,3 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Langflow OSS | CVE-2026-110186 IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control of code generation. |
9,8 | 0,62 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 03:02 UTC – 15.11.2026, 08:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.