Publikacje w kolejności czasu

Wszystkie technologie
CVSS — dotkliwość podatności w skali 0–10. Wyższy wynik oznacza poważniejsze skutki. Nie określa prawdopodobieństwa ataku.EPSS — szacowane prawdopodobieństwo wykorzystania podatności w atakach w ciągu najbliższych 30 dni. Wynik jest podany w procentach.CISA KEV — katalog podatności o potwierdzonym wykorzystaniu w atakach. Brak wpisu nie oznacza braku ataków.
Podatności: nazwa, oprogramowanie, krótki opis, CVSS, EPSS i KEV.
OprogramowaniePodatność i krótki opisZapisz
iSulad CVE-2026-111433
Monitoruj

UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c. This issue affects iSulad: through 2.1.6. If an attacker can get the victim or the platform to run their crafted…

8,6 0,49 % Brak wpisu w KEV nie wyklucza ataków
iSulad CVE-2026-111434
Pozostałe

Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c. This issue affects iSulad: through 2.1.6. When the iSulad daemon performs container lifecycle operations (such…

5,6 0,16 % Brak wpisu w KEV nie wyklucza ataków
iSulad CVE-2026-111435
Monitoruj

Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c. This issue affects iSulad: through 2.1.6. In oci_load.c, oci_load_process_manifest() does not sanitize the Config path of…

7,4 0,43 % Brak wpisu w KEV nie wyklucza ataków
iSulad CVE-2026-111436
Pozostałe

Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c. This issue affects iSulad: through 2.1.6. The memory leak vulnerability causes the iSulad daemon to be…

4,4 0,16 % Brak wpisu w KEV nie wyklucza ataków
Movable Type / Movable Type Advanced / Movable Type Premium (+1 produktów) CVE-2026-117687
Pozostałe

Movable Type provided by Six Apart Ltd. contains a code injection vulnerability in its Dynamic Publishing functionality. By sending a specially crafted request that is processed by the Dynamic Publishing, an attacker may be able to execute arbitrary PHP code on the affected product.

6,9 0,31 % Brak wpisu w KEV nie wyklucza ataków
DiskStation Manager (DSM) CVE-2026-124993
Pozostałe

An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to read specific files.

5,3 0,49 % Brak wpisu w KEV nie wyklucza ataków
Cobalt CVE-2026-121753
Monitoruj

Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit…

7,8 0,22 % Brak wpisu w KEV nie wyklucza ataków
Hue Bridge Pro CVE-2026-122044
Monitoruj

Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific…

8,8 0,38 % Brak wpisu w KEV nie wyklucza ataków
ToolJet CVE-2026-126795
Monitoruj

A vulnerability was determined in ToolJet up to 3.20.256-lts/3.21.93-beta. The impacted element is the function activateUserWithPassword of the file server/src/modules/onboarding/util.service.ts of the component Onboarding Signup Endpoint. Executing a manipulation of the argument email can lead to…

7,3 0,49 % Brak wpisu w KEV nie wyklucza ataków
Zephyr CVE-2026-126957
Pozostałe

An integer underflow in Zephyr's IPv4 option handling allows a remote, unauthenticated attacker to read stack memory. When replying to an ICMP Echo Request that carries an IPv4 Record Route or Timestamp option, icmpv4_update_record_route() and icmpv4_update_time_stamp() in subsys/net/ip/icmpv4.c…

6,9 0,25 % Brak wpisu w KEV nie wyklucza ataków
NetVault Backup CVE-2026-13269
Monitoruj

Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The…

7,5 0,8 % Brak wpisu w KEV nie wyklucza ataków
NetVault Backup CVE-2026-13270
Monitoruj

Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw…

7,5 0,8 % Brak wpisu w KEV nie wyklucza ataków
Hue Bridge Pro CVE-2026-118631
Pozostałe

Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability. This vulnerability allows local attackers to modify files on affected installations of Philips Hue Bridge Pro. An attacker must first obtain the ability to execute low-privileged code within a container on the target…

3,8 0,16 % Brak wpisu w KEV nie wyklucza ataków
Hue Bridge Pro CVE-2026-118632
Monitoruj

Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge Pro. Although authentication is required to exploit this vulnerability, the existing…

8,0 0,86 % Brak wpisu w KEV nie wyklucza ataków
SketchUp CVE-2026-121741
Monitoruj

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a…

7,8 0,2 % Brak wpisu w KEV nie wyklucza ataków
Cobalt CVE-2026-121742
Monitoruj

Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit…

7,8 0,22 % Brak wpisu w KEV nie wyklucza ataków
Cobalt CVE-2026-121743
Monitoruj

Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target…

7,8 0,21 % Brak wpisu w KEV nie wyklucza ataków
Cobalt CVE-2026-121744
Monitoruj

Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the…

7,8 0,22 % Brak wpisu w KEV nie wyklucza ataków
Cobalt CVE-2026-121752
Monitoruj

Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target…

7,8 0,3 % Brak wpisu w KEV nie wyklucza ataków
Origin Viewer CVE-2026-114563
Monitoruj

OriginLab Origin Viewer OGWU File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that…

7,8 0,22 % Brak wpisu w KEV nie wyklucza ataków
Origin Viewer CVE-2026-114564
Monitoruj

OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the…

7,8 0,26 % Brak wpisu w KEV nie wyklucza ataków
Origin Viewer CVE-2026-114565
Monitoruj

OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target…

7,8 0,26 % Brak wpisu w KEV nie wyklucza ataków
Origin Viewer CVE-2026-114566
Monitoruj

OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target…

7,8 0,26 % Brak wpisu w KEV nie wyklucza ataków
Origin Viewer CVE-2026-114567
Monitoruj

OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the…

7,8 0,26 % Brak wpisu w KEV nie wyklucza ataków
Origin Viewer CVE-2026-114568
Monitoruj

OriginLab Origin Viewer OPJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the…

7,8 0,22 % Brak wpisu w KEV nie wyklucza ataków
Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 15.11.2026, 03:02 UTC – 15.11.2026, 08:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData oceny znajduje się przy rekordzie. Codziennie: KEV i publikacje z 30 dni; pozostałe CVE: raz w tygodniu.