Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| iSulad | CVE-2026-111433 UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c. This issue affects iSulad: through 2.1.6. If an attacker can get the victim or the platform to run their crafted… |
8,6 | 0,49 % | Brak wpisu w KEV nie wyklucza ataków | |
| iSulad | CVE-2026-111434 Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c. This issue affects iSulad: through 2.1.6. When the iSulad daemon performs container lifecycle operations (such… |
5,6 | 0,16 % | Brak wpisu w KEV nie wyklucza ataków | |
| iSulad | CVE-2026-111435 Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c. This issue affects iSulad: through 2.1.6. In oci_load.c, oci_load_process_manifest() does not sanitize the Config path of… |
7,4 | 0,43 % | Brak wpisu w KEV nie wyklucza ataków | |
| iSulad | CVE-2026-111436 Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c. This issue affects iSulad: through 2.1.6. The memory leak vulnerability causes the iSulad daemon to be… |
4,4 | 0,16 % | Brak wpisu w KEV nie wyklucza ataków | |
| Movable Type / Movable Type Advanced / Movable Type Premium (+1 produktów) | CVE-2026-117687 Movable Type provided by Six Apart Ltd. contains a code injection vulnerability in its Dynamic Publishing functionality. By sending a specially crafted request that is processed by the Dynamic Publishing, an attacker may be able to execute arbitrary PHP code on the affected product. |
6,9 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| DiskStation Manager (DSM) | CVE-2026-124993 An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to read specific files. |
5,3 | 0,49 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cobalt | CVE-2026-121753 Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit… |
7,8 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| Hue Bridge Pro | CVE-2026-122044 Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required to exploit this vulnerability. The specific… |
8,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| ToolJet | CVE-2026-126795 A vulnerability was determined in ToolJet up to 3.20.256-lts/3.21.93-beta. The impacted element is the function activateUserWithPassword of the file server/src/modules/onboarding/util.service.ts of the component Onboarding Signup Endpoint. Executing a manipulation of the argument email can lead to… |
7,3 | 0,49 % | Brak wpisu w KEV nie wyklucza ataków | |
| Zephyr | CVE-2026-126957 An integer underflow in Zephyr's IPv4 option handling allows a remote, unauthenticated attacker to read stack memory. When replying to an ICMP Echo Request that carries an IPv4 Record Route or Timestamp option, icmpv4_update_record_route() and icmpv4_update_time_stamp() in subsys/net/ip/icmpv4.c… |
6,9 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków | |
| NetVault Backup | CVE-2026-13269 Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The… |
7,5 | 0,8 % | Brak wpisu w KEV nie wyklucza ataków | |
| NetVault Backup | CVE-2026-13270 Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw… |
7,5 | 0,8 % | Brak wpisu w KEV nie wyklucza ataków | |
| Hue Bridge Pro | CVE-2026-118631 Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability. This vulnerability allows local attackers to modify files on affected installations of Philips Hue Bridge Pro. An attacker must first obtain the ability to execute low-privileged code within a container on the target… |
3,8 | 0,16 % | Brak wpisu w KEV nie wyklucza ataków | |
| Hue Bridge Pro | CVE-2026-118632 Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge Pro. Although authentication is required to exploit this vulnerability, the existing… |
8,0 | 0,86 % | Brak wpisu w KEV nie wyklucza ataków | |
| SketchUp | CVE-2026-121741 Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a… |
7,8 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cobalt | CVE-2026-121742 Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit… |
7,8 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cobalt | CVE-2026-121743 Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target… |
7,8 | 0,21 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cobalt | CVE-2026-121744 Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the… |
7,8 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cobalt | CVE-2026-121752 Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target… |
7,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Origin Viewer | CVE-2026-114563 OriginLab Origin Viewer OGWU File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that… |
7,8 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| Origin Viewer | CVE-2026-114564 OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the… |
7,8 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| Origin Viewer | CVE-2026-114565 OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target… |
7,8 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| Origin Viewer | CVE-2026-114566 OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target… |
7,8 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| Origin Viewer | CVE-2026-114567 OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the… |
7,8 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| Origin Viewer | CVE-2026-114568 OriginLab Origin Viewer OPJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the… |
7,8 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 03:02 UTC – 15.11.2026, 08:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.