Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Wheels | CVE-2026-111450 Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request… |
5,9 | 0,14 % | Brak wpisu w KEV nie wyklucza ataków | |
| Wheels CLI | CVE-2026-111451 Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds. Package removal and destroy paths can delete… |
7,8 | 0,14 % | Brak wpisu w KEV nie wyklucza ataków | |
| Wheels | CVE-2026-111443 Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an X-Wheels-Test-Context header or WHEELS_TEST_CONTEXT cookie with any value, or including a test-runner path anywhere in the URL, even the… |
6,5 | 0,16 % | Brak wpisu w KEV nie wyklucza ataków | |
| Wheels | CVE-2026-111444 Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings… |
9,8 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| Wheels | CVE-2026-111445 Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=). For exists(key=), production with error information disabled returns true for an out-of-scope key instead of throwing. Applications relying on scopes for… |
8,1 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| Wheels | CVE-2026-111446 Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicComponent=true, as it is by default in development. Before 4.1.2 these tools have no local-access restriction; in 4.1.2 the restriction trusts client-supplied headers without… |
8,6 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| Wheels | CVE-2026-111447 Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the parent being saved. A user able to submit a nested form for their own parent can update and reassign another parent's hasMany or hasOne rows, or delete them when… |
8,1 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| Backdrop | CVE-2026-111442 Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure they lack potentially dangerous SVG tags. SVG images can contain clickable links or executable scripting. By uploading a crafted SVG, it is possible to execute scripting in… |
5,3 | 0,23 % | Brak wpisu w KEV nie wyklucza ataków | |
| RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator | CVE-2026-109207 The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'media:thumbnail@url' parameter in all versions up to, and including, 5.2.11 due to insufficient input sanitization and output… |
7,2 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Flying Scripts: Delay JavaScript to Improve Site Speed & Performance | CVE-2026-109990 The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for… |
7,2 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Colibri Page Builder | CVE-2026-107758 The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.0.390 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary… |
7,2 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Debloat – Remove Unused CSS, Optimize JS | CVE-2026-104769 The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of… |
5,9 | 0,75 % | Brak wpisu w KEV nie wyklucza ataków | |
| FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler | CVE-2026-103518 The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to generic SQL Injection via the 'products[*].variants[*].<attacker-chosen key>' parameter in all versions up to, and including, 1.7.0 due to insufficient escaping on the user supplied parameter… |
4,9 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Customer Email Verification for WooCommerce | CVE-2026-104745 The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email` parameter in versions up to, and including, 3.3.0. The vulnerability exists because `alg_wc_ev_generate_user_code()` generates the per-user activation secret… |
8,1 | 0,68 % | Brak wpisu w KEV nie wyklucza ataków | |
| nezha | CVE-2026-111386 Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated members to enumerate other tenants' server IDs through differential responses. Attackers can sweep sequential IDs against getServerConfig and setServerConfig, distinguishing 'permission… |
5,3 | 0,21 % | Brak wpisu w KEV nie wyklucza ataków | |
| nezha | CVE-2026-111387 Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read… |
7,1 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| frappe | CVE-2026-111388 Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user restrict_ip allowlist for non-session authentication methods, including API key, OAuth, and header-based authentication. Attackers holding valid credentials of these types can authenticate from IP addresses… |
5,3 | 0,17 % | Brak wpisu w KEV nie wyklucza ataków | |
| hrms | CVE-2026-111389 Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Any authenticated attacker, including a low-privilege account, can send specially crafted requests to these endpoints to… |
8,3 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| FreeRDP | CVE-2026-111380 FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), which compute the audio queue buffer size as FramesPerPacket * 2 * nChannels in UINT32 arithmetic, bypassing the CVE-2026-91962 fix. A malicious RDP server can send… |
8,7 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| FreeRDP | CVE-2026-111381 FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local attackers to corrupt heap memory via integer wraparound in bitmap size calculation. Attackers can craft a persistent cache v2 file with oversized width and height values that… |
7,0 | 0,18 % | Brak wpisu w KEV nie wyklucza ataków | |
| FreeRDP | CVE-2026-111382 FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows malicious RDP servers to corrupt client memory. Attackers can send RDPGFX AVC444 or AVC444v2 frames with odd-height region rects ending at surface… |
8,7 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| nezha | CVE-2026-111383 Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows authenticated users to open unbounded concurrent connections to the /api/v1/ws/transfer WebSocket endpoint. Attackers can hold thousands of subscriptions created by ServerTransferClass.Subscribe without… |
7,1 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| nezha | CVE-2026-111384 Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file manager WebSocket endpoint because fmStream never calls SetReadLimit, leaving message size unbounded. Authenticated users with file manager scopes can send one oversized binary message to… |
7,1 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| nezha | CVE-2026-111385 Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.download_url and fs.upload_url transfer URLs from the unvalidated Host header. Attackers who control the Host header seen on a victim's MCP request can redirect file uploads or capture… |
6,3 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| FreeRDP | CVE-2026-111373 FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is zero, websocket_reply_pong passes a nullptr stream to websocket_reply_close, triggering an… |
7,5 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 03:02 UTC – 15.11.2026, 08:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.