KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files…
CAPEv2 through commit 471ee4b fails to validate task ownership in REST API endpoints, allowing authenticated users to read and delete analyses submitted by other users. Attackers can enumerate all tasks in the system and delete arbitrary analyses by sending…
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network…
Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function that interpolates user-supplied monitor addresses directly into shell commands without validation. Authenticated users with monitor permissions can inject shell…
Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components. Attackers can inject malicious markup like img elements with onerror handlers into…
Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add() endpoint, allowing customers to inject arbitrary lines into authorized_keys files. Attackers can inject malicious SSH key entries with option directives to gain…
The User Registration & Membership WordPress plugin before 5.2.8 does not check the capability of the user making a membership purchase, and does not validate the payment method or the plan submitted with it, allowing any authenticated user such as a…
The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor enrolment, allowing an attacker who already knows the account's password to bypass the second factor…
The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership plan or validate the plan a user attaches to their own account, allowing authenticated users with Author-level access and above to assign…
An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured with a QUIC bind listener, and the affected traffic must reach a backend…
A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component Kernel Driver. The manipulation results in improper access controls. Attacking…
The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service (memory consumption and unresponsive server) via an HTTP request with an unlimited…
wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc() in wasm_rt_allocate_funcref_table()…
Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the api_ssl_verify and upstream_ssl_verify configuration keys are omitted from socket.yml, the generated…
Luka w Flatpak umożliwia złośliwej aplikacji dostęp do plików na hoście i wykonanie kodu.
Przepełnienie bufora w Freeciv umożliwia atakującym korupcję pamięci przez złośliwe pliki zapisu.
Przepełnienie bufora w snappy-java pozwala na zdalne zakończenie działania JVM.
Błąd odczytu poza granicami w zstd-jni może prowadzić do awarii JVM.
Brak limitów na rozmiar i czas dekodowania audio w vLLM pozwala na atak DoS.
Błąd w vLLM umożliwia atakującym zdalne przeciążenie serwera API przez fałszywe nagłówki.
Wykonanie zdalnego kodu w vLLM umożliwia atakującym uruchomienie złośliwego modelu.
Podatność w Flowise umożliwia atakującym zdalne zakłócenie usługi poprzez przerywanie aktywnych prognoz.
Brak autoryzacji w WWBN AVideo umożliwia nieautoryzowanym atakującym dostęp do zadań e-mail.
Wtyczka MemberPress Corporate Accounts w WordPress umożliwia eskalację uprawnień do konta administratora.
Obejście uwierzytelnienia w MCPHub umożliwia dostęp do kont ofiar bez podawania sekretu.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-90774 rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply… |
Monitoruj |
CVSS 8,7EPSS 1,36 % | ||
| CVE-2026-90768 CAPEv2 through commit 471ee4b fails to validate task ownership in REST API endpoints, allowing authenticated users to read and delete analyses submitted by other users. Attackers can… |
Monitoruj |
CVSS 8,6EPSS 0,43 % | ||
| CVE-2026-90769 Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers… |
Monitoruj |
CVSS 8,3EPSS 0,42 % | ||
| CVE-2026-90770 Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function that interpolates user-supplied monitor addresses directly into shell commands without… |
Monitoruj |
CVSS 8,7EPSS 1,32 % | ||
| CVE-2026-90772 Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components. Attackers can… |
Monitoruj |
CVSS 8,3EPSS 0,36 % | ||
| CVE-2026-90767 Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add() endpoint, allowing customers to inject arbitrary lines into authorized_keys files.… |
Monitoruj |
CVSS 7,1EPSS 0,43 % | ||
| CVE-2026-86406 The User Registration & Membership WordPress plugin before 5.2.8 does not check the capability of the user making a membership purchase, and does not validate the payment method or the… |
Monitoruj |
CVSS 7,5EPSS 0,32 % | ||
| CVE-2026-89080 The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor enrolment, allowing an attacker… |
Monitoruj |
CVSS 7,5EPSS 0,34 % | ||
| CVE-2026-80071 The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership plan or validate the plan a user attaches to their own account,… |
Monitoruj |
CVSS 7,2EPSS 0,46 % | ||
| CVE-2026-90678 An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured… |
Monitoruj |
CVSS 7,5EPSS 0,77 % | ||
| CVE-2026-90493 A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component Kernel… |
Monitoruj |
CVSS 8,5EPSS 0,16 % | ||
| CVE-2026-90668 The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service (memory… |
Monitoruj |
CVSS 8,7EPSS 0,58 % | ||
| CVE-2026-90648 wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of… |
Monitoruj |
CVSS 7,1EPSS 0,19 % | ||
| CVE-2026-90651 Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the api_ssl_verify and upstream_ssl_verify… |
Monitoruj |
CVSS 8,1EPSS 0,21 % | ||
| CVE-2026-90616 Luka w Flatpak umożliwia złośliwej aplikacji dostęp do plików na hoście i wykonanie kodu. |
Monitoruj |
CVSS 7,4EPSS 0,18 % | ||
| CVE-2026-90556 Przepełnienie bufora w Freeciv umożliwia atakującym korupcję pamięci przez złośliwe pliki zapisu. |
Monitoruj |
CVSS 8,5EPSS 0,2 % | ||
| CVE-2026-90559 Przepełnienie bufora w snappy-java pozwala na zdalne zakończenie działania JVM. |
Monitoruj |
CVSS 8,7EPSS 0,63 % | ||
| CVE-2026-90560 Błąd odczytu poza granicami w zstd-jni może prowadzić do awarii JVM. |
Monitoruj |
CVSS 8,8EPSS 0,62 % | ||
| CVE-2026-90554 Brak limitów na rozmiar i czas dekodowania audio w vLLM pozwala na atak DoS. |
Monitoruj |
CVSS 7,5EPSS 0,2 % | ||
| CVE-2026-90555 Błąd w vLLM umożliwia atakującym zdalne przeciążenie serwera API przez fałszywe nagłówki. |
Monitoruj |
CVSS 7,1EPSS 0,52 % | ||
| CVE-2026-90553 Wykonanie zdalnego kodu w vLLM umożliwia atakującym uruchomienie złośliwego modelu. |
Monitoruj |
CVSS 8,5EPSS 0,31 % | ||
| CVE-2026-90535 Podatność w Flowise umożliwia atakującym zdalne zakłócenie usługi poprzez przerywanie aktywnych prognoz. |
MonitorujPubliczny PoC |
CVSS 7,5EPSS 0,48 % | ||
| CVE-2026-90537 Brak autoryzacji w WWBN AVideo umożliwia nieautoryzowanym atakującym dostęp do zadań e-mail. |
Monitoruj |
CVSS 8,8EPSS 0,36 % | ||
| CVE-2026-15451 Wtyczka MemberPress Corporate Accounts w WordPress umożliwia eskalację uprawnień do konta administratora. |
Monitoruj |
CVSS 8,8EPSS 0,44 % | ||
| CVE-2026-90474 Obejście uwierzytelnienia w MCPHub umożliwia dostęp do kont ofiar bez podawania sekretu. |
Monitoruj |
CVSS 7,6EPSS 0,55 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 6.11.2026, 11:02 UTC – 6.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.