Baza CVE

Wszystkie technologie

Szukaj CVE lub produktu Publikacja CVEKolejność

Podatności: nazwa, oprogramowanie, krótki opis, CVSS, EPSS i KEV.
Oprogramowanie	Podatność i krótki opis
Oracle REST Data Services	CVE-2026-101383 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…	5,4	0,23 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101367 Pozostałe Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can…	5,4	0,22 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101368 Pozostałe Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require…	5,4	0,23 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101369 Pozostałe Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require…	6,1	0,23 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101370 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…	3,1	0,23 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101371 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…	3,1	0,18 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101372 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability…	3,7	0,26 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101373 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…	2,4	0,27 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101374 Pozostałe Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of…	5,9	0,3 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101359 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability…	5,3	0,31 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101360 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can…	5,4	0,22 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101361 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability…	4,2	0,18 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101362 Pozostałe Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…	6,9	0,22 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101363 Pozostałe Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this…	5,3	0,3 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101364 Pozostałe Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human…	5,4	0,19 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101365 Pozostałe Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this…	4,7	0,29 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Oracle REST Data Services	CVE-2026-101366 Pozostałe Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks of this vulnerability can…	4,3	0,28 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2025-60475 Pozostałe A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.	5,5	0,21 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2025-60494 Pozostałe A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted data file.	5,5	0,2 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Produkt nieustalony	CVE-2025-60496 Pozostałe A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.	5,5	0,4 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Totolink	CVE-2026-9827 Wysoki priorytet A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…	9,1	0,63 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Totolink	CVE-2026-9869 Wysoki priorytet A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this…	9,1	0,51 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
curl	CVE-2026-94265 Wysoki priorytet When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious server can trigger a redirect containing arbitrary userinfo to…	9,1	0,78 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
curl	CVE-2026-94266 Monitoruj libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither the URL provided to libcurl nor the redirected URL did.	7,5	0,56 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków
Totolink	CVE-2026-9659 Wysoki priorytet Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to…	9,1	0,79 %13 lis 2026	Brak wpisu w KEV nie wyklucza ataków

Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 13.11.2026, 15:09 UTC – 13.11.2026, 20:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone13.11.2026, 20:08 UTC

NVD · aktualizacjeOstatnie przetworzenie zakończone13.11.2026, 20:09 UTC

CISA KEVOstatnie przetworzenie zakończone13.11.2026, 22:45 UTC

FIRST EPSSOstatnie przetworzenie zakończone13.11.2026, 16:24 UTCData oceny znajduje się przy rekordzie. Codziennie: KEV i publikacje z 30 dni; pozostałe CVE: raz w tygodniu.