CVE-2025-70820
Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder.
PozostałeOpis źródłowy · EN
- CVSS
- 3,5
- EPSS
- 0,27 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Baza CVE
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
CVE-2026-29810
CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.
PozostałeOpis źródłowy · EN
- CVSS
- 4,3
- EPSS
- 0,31 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90577
A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field of the file scenegraph/base_scenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The…
PozostałeOpis źródłowy · EN
- CVSS
- 1,9
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90578
A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gf_list_count of the file utils/list.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack is restricted to local execution. The exploit…
PozostałeOpis źródłowy · EN
- CVSS
- 1,9
- EPSS
- 0,17 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90579
A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function _authorize_http_key of the file core/cat/factory/custom_auth_handler.py. The manipulation of the argument user_id leads to missing authentication. The…
PozostałeOpis źródłowy · EN
- CVSS
- 5,5
- EPSS
- 0,65 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2025-45480
Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary.
PozostałeOpis źródłowy · EN
- CVSS
- 3,0
- EPSS
- 0,18 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2025-64059
Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is disputed because admins are allowed to modify templates, install plugins, and upload other executable content.
PozostałeOpis źródłowy · EN
- CVSS
- 1,8
- EPSS
- 0,12 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2025-70819
Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose file.
PozostałeOpis źródłowy · EN
- CVSS
- 6,3
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90576
A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gf_node_list_add_child of the file scenegraph/base_scenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be…
PozostałeOpis źródłowy · EN
- CVSS
- 1,9
- EPSS
- 0,17 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2020-15875
An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the searchPhrase parameter in the /ajax_table.php API endpoint. This affects…
PozostałeOpis źródłowy · EN
- CVSS
- 5,0
- EPSS
- 0,46 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90575
A weakness has been identified in PHPGurukul Small CRM 4.0. This impacts the function unserialize of the file /crm/login.php of the component Login Success Handler. This manipulation of the argument geopluginURL causes deserialization. It is possible to…
PozostałeOpis źródłowy · EN
- CVSS
- 2,9
- EPSS
- 0,48 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90573
A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf_sg_mfurl_del of the file scenegraph/vrml_tools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach…
PozostałeOpis źródłowy · EN
- CVSS
- 1,9
- EPSS
- 0,17 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90574
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emp_transac.php?action=add. The manipulation of the argument firstname results in sql injection. The attack may be…
PozostałeOpis źródłowy · EN
- CVSS
- 2,1
- EPSS
- 0,33 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90572
A vulnerability was determined in davenardella snap7 up to 1.4.3. The affected element is the function TSnap7MicroClient::opUpload of the file src/core/s7_micro_client.cpp. Executing a manipulation of the argument DataLen can lead to memory corruption. The…
PozostałeOpis źródłowy · EN
- CVSS
- 2,0
- EPSS
- 0,42 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90571
A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. Impacted is an unknown function of the file xmall-manager-web/src/main/webapp/WEB-INF/jsp/order-print.jsp of the component Order Printing. Performing a manipulation…
PozostałeOpis źródłowy · EN
- CVSS
- 5,3
- EPSS
- 0,47 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90569
A flaw has been found in linlinjava litemall 1.5.0/1.6.0/1.7.0/1.8.0. This vulnerability affects the function AdminTopicController.validate of the file litemall-vue/src/views/items/topic/index.vue of the component Admin Topic Handler. This manipulation…
PozostałeOpis źródłowy · EN
- CVSS
- 4,8
- EPSS
- 0,37 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90570
A vulnerability has been found in linlinjava litemall 1.4.0/1.5.0/1.6.0/1.7.0/1.8.0. This issue affects the function AdminGoodsService.validate of the file litemall-vue/src/views/items/detail/index.vue of the component Product Detail. Such manipulation of…
PozostałeOpis źródłowy · EN
- CVSS
- 4,8
- EPSS
- 0,37 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90568
A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2. This affects the function BlogSortServiceImpl.addBlogSort of the file mogu_web/src/main/resources/templates/info.ftl of the component blogSort Endpoint. The manipulation of the argument sortName…
PozostałeOpis źródłowy · EN
- CVSS
- 5,1
- EPSS
- 0,33 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90565
A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access…
PozostałeOpis źródłowy · EN
- CVSS
- 5,5
- EPSS
- 0,53 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90566
A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function createUserAccount of the file register.php of the component Registration Handler. Executing…
PozostałeOpis źródłowy · EN
- CVSS
- 5,5
- EPSS
- 0,47 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90567
A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/src/components/Search/index.vue of the component Search. The manipulation of the argument…
PozostałeOpis źródłowy · EN
- CVSS
- 5,1
- EPSS
- 0,35 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90564
A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue of the component chat sendMsg Endpoint. Such manipulation of the argument chat_msg…
PozostałeOpis źródłowy · EN
- CVSS
- 5,1
- EPSS
- 0,35 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90527
A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the component Add Message API. The manipulation of the argument body.content results in cross…
PozostałeOpis źródłowy · EN
- CVSS
- 5,3
- EPSS
- 0,47 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90528
A flaw has been found in TDuckApp tduck-platform up to 5.3. Affected by this vulnerability is an unknown functionality of the file tduck-front/src/views/form/write/index.vue of the component Form Write View. This manipulation of the argument…
PozostałeOpis źródłowy · EN
- CVSS
- 5,1
- EPSS
- 0,35 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-90529
A vulnerability has been found in DataEase up to 2.10.25/2.10.26. Affected by this issue is the function buildTooltip of the file core/core-frontend/src/views/chart/components/js/panel/charts/map/symbolic-map.ts of the component Symbolic Map. Such…
PozostałeOpis źródłowy · EN
- CVSS
- 5,1
- EPSS
- 0,35 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2025-70820 Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder. |
Pozostałe |
CVSS 3,5EPSS 0,27 % | ||
| CVE-2026-29810 CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic. |
Pozostałe |
CVSS 4,3EPSS 0,31 % | ||
| CVE-2026-90577 A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field of the file scenegraph/base_scenegraph.c of the component MP4Box.… |
Pozostałe |
CVSS 1,9EPSS 0,18 % | ||
| CVE-2026-90578 A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gf_list_count of the file utils/list.c of the component MP4Box. Executing a manipulation can lead to… |
Pozostałe |
CVSS 1,9EPSS 0,17 % | ||
| CVE-2026-90579 A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function _authorize_http_key of the file core/cat/factory/custom_auth_handler.py. The… |
Pozostałe |
CVSS 5,5EPSS 0,65 % | ||
| CVE-2025-45480 Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary. |
Pozostałe |
CVSS 3,0EPSS 0,18 % | ||
| CVE-2025-64059 Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is disputed because admins are allowed to modify templates, install… |
Pozostałe |
CVSS 1,8EPSS 0,12 % | ||
| CVE-2025-70819 Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose file. |
Pozostałe |
CVSS 6,3EPSS 0,14 % | ||
| CVE-2026-90576 A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gf_node_list_add_child of the file scenegraph/base_scenegraph.c of the component MP4Box. Such… |
Pozostałe |
CVSS 1,9EPSS 0,17 % | ||
| CVE-2020-15875 An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the… |
Pozostałe |
CVSS 5,0EPSS 0,46 % | ||
| CVE-2026-90575 A weakness has been identified in PHPGurukul Small CRM 4.0. This impacts the function unserialize of the file /crm/login.php of the component Login Success Handler. This manipulation of… |
Pozostałe |
CVSS 2,9EPSS 0,48 % | ||
| CVE-2026-90573 A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf_sg_mfurl_del of the file scenegraph/vrml_tools.c of the component MP4Box. The manipulation… |
Pozostałe |
CVSS 1,9EPSS 0,17 % | ||
| CVE-2026-90574 A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emp_transac.php?action=add. The manipulation of the… |
Pozostałe |
CVSS 2,1EPSS 0,33 % | ||
| CVE-2026-90572 A vulnerability was determined in davenardella snap7 up to 1.4.3. The affected element is the function TSnap7MicroClient::opUpload of the file src/core/s7_micro_client.cpp. Executing a… |
Pozostałe |
CVSS 2,0EPSS 0,42 % | ||
| CVE-2026-90571 A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. Impacted is an unknown function of the file xmall-manager-web/src/main/webapp/WEB-INF/jsp/order-pri… |
Pozostałe |
CVSS 5,3EPSS 0,47 % | ||
| CVE-2026-90569 A flaw has been found in linlinjava litemall 1.5.0/1.6.0/1.7.0/1.8.0. This vulnerability affects the function AdminTopicController.validate of the file… |
Pozostałe |
CVSS 4,8EPSS 0,37 % | ||
| CVE-2026-90570 A vulnerability has been found in linlinjava litemall 1.4.0/1.5.0/1.6.0/1.7.0/1.8.0. This issue affects the function AdminGoodsService.validate of the file… |
Pozostałe |
CVSS 4,8EPSS 0,37 % | ||
| CVE-2026-90568 A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2. This affects the function BlogSortServiceImpl.addBlogSort of the file mogu_web/src/main/resources/templates/info.ftl of the… |
Pozostałe |
CVSS 5,1EPSS 0,33 % | ||
| CVE-2026-90565 A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php.… |
Pozostałe |
CVSS 5,5EPSS 0,53 % | ||
| CVE-2026-90566 A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function createUserAccount of… |
Pozostałe |
CVSS 5,5EPSS 0,47 % | ||
| CVE-2026-90567 A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file… |
Pozostałe |
CVSS 5,1EPSS 0,35 % | ||
| CVE-2026-90564 A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue of the… |
Pozostałe |
CVSS 5,1EPSS 0,35 % | ||
| CVE-2026-90527 A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the component Add Message… |
Pozostałe |
CVSS 5,3EPSS 0,47 % | ||
| CVE-2026-90528 A flaw has been found in TDuckApp tduck-platform up to 5.3. Affected by this vulnerability is an unknown functionality of the file tduck-front/src/views/form/write/index.vue of the… |
Pozostałe |
CVSS 5,1EPSS 0,35 % | ||
| CVE-2026-90529 A vulnerability has been found in DataEase up to 2.10.25/2.10.26. Affected by this issue is the function buildTooltip of the file core/core-frontend/src/views/chart/components/js/panel/char… |
Pozostałe |
CVSS 5,1EPSS 0,35 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 4.11.2026, 17:55 UTC – 4.11.2026, 20:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.