Baza CVE

Wszystkie technologie

Szukaj CVE lub produktu Publikacja CVEKolejność

Podatności: nazwa, oprogramowanie, krótki opis, CVSS, EPSS i KEV.
Oprogramowanie	Podatność i krótki opis	CVSS	EPSS	KEV
Produkt nieustalony	CVE-2026-101369 Pozostałe Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require…	CVSS6,1	EPSS0,23 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-101370 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…	CVSS3,1	EPSS0,23 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-101371 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…	CVSS3,1	EPSS0,18 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-101372 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability…	CVSS3,7	EPSS0,26 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-101373 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…	CVSS2,4	EPSS0,27 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-101374 Pozostałe Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of…	CVSS5,9	EPSS0,3 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-101359 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability…	CVSS5,3	EPSS0,31 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-101360 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can…	CVSS5,4	EPSS0,22 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-101361 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability…	CVSS4,2	EPSS0,18 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-101362 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…	CVSS6,9	EPSS0,22 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-101363 Pozostałe Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this…	CVSS5,3	EPSS0,3 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-101364 Pozostałe Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…	CVSS5,4	EPSS0,19 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-101365 Pozostałe Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this…	CVSS4,7	EPSS0,29 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-101366 Pozostałe Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can…	CVSS4,3	EPSS0,28 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2025-60475 Pozostałe A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.	CVSS5,5	EPSS0,21 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2025-60494 Pozostałe A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted data file.	CVSS5,5	EPSS0,2 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2025-60496 Pozostałe A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.	CVSS5,5	EPSS0,4 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-9827 Wysoki priorytet A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…	CVSS9,1	EPSS0,63 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-9869 Wysoki priorytet A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…	CVSS9,1	EPSS0,51 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-94265 Wysoki priorytet When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious server can trigger a redirect containing arbitrary userinfo to…	CVSS9,1	EPSS0,78 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-94266 Monitoruj libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither the URL provided to libcurl nor the redirected URL did.	CVSS7,5	EPSS0,56 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-9659 Wysoki priorytet Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to…	CVSS9,1	EPSS0,79 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-9660 Wysoki priorytet Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to…	CVSS9,1	EPSS0,51 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-9814 Wysoki priorytet An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…	CVSS9,1	EPSS1,6 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2026-9817 Wysoki priorytet A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…	CVSS9,1	EPSS0,51 %13 lis 2026	KEVBrak wpisu w KEV nie wyklucza ataków

Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 13.11.2026, 11:02 UTC – 13.11.2026, 16:09 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone13.11.2026, 16:15 UTC

NVD · aktualizacjeOstatnie przetworzenie zakończone13.11.2026, 16:16 UTC

CISA KEVOstatnie przetworzenie zakończone13.11.2026, 17:15 UTC

FIRST EPSSOstatnie przetworzenie zakończone13.11.2026, 16:24 UTCData oceny znajduje się przy rekordzie. Codziennie: KEV i publikacje z 30 dni; pozostałe CVE: raz w tygodniu.