Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| ExLlamaV2 | CVE-2026-110695 A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument data_offsets results in buffer overflow. The attack is possible to be… |
2,1 | 0,36 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Online-Examination-System | CVE-2026-110696 A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is an unknown function of the file dbtables.sql. Executing a manipulation can lead to information disclosure. The attack may be launched remotely. The… |
5,5 | 0,41 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-69194 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise returns the stored branding.footerHtml value through the unauthenticated public site configuration API without server-side sanitization. The FileRise frontend already… |
4,8 | 0,23 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| openaev | CVE-2026-71854 OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default installation, the `/api/player/**` lessons endpoints can be called without authentication, and they trust a… |
8,2 | 0,25 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-77427 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERSISTENT_TOKENS_KEY or metadata/persistent_tokens.key can activate a published legacy compatibility key. If an attacker… |
5,9 | 0,35 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Network Security Manager (NSM) | CVE-2026-96540 An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or… |
8,8 | 0,31 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-61844 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise flattens logical folder paths into metadata filenames by replacing separators and spaces with hyphens, so distinct folders such as team/docs and team-docs can share one… |
7,1 | 0,32 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-62664 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder() constructs and creates the destination. An… |
5,4 | 0,29 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-64856 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the standard authenticated-session guard before processing short text preview requests. The endpoint still performs FileRise ACL… |
3,7 | 0,23 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-69191 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and disableOIDCLogin in the client interface but not consistently in the corresponding server-side authentication flows. A… |
5,4 | 0,22 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-69193 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise tracks failed logins only by the combination of source IP address and username. A remote unauthenticated attacker can rotate usernames to obtain a fresh per-account… |
6,5 | 0,37 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-57489 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTH_BYPASS enabled trust the configured reverse-proxy identity header without verifying that the request originated from FR_TRUSTED_PROXIES. When the… |
8,1 | 0,65 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-57490 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic authentication validates only the account username and password through AuthModel::authenticate() and does not… |
8,1 | 0,52 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-57491 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not apply UploadNamePolicy::isAllowedForWrite() before ZipArchive::extractTo() writes entries into the destination directory. An authenticated… |
6,5 | 0,35 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-57492 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise treats an empty or missing users.txt file as a fresh installation even after setup previously completed. If storage loss, truncation, or another failure empties the… |
7,4 | 0,35 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-57493 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise stores the isAdmin flag in remember-me tokens and restores that stale value during automatic login instead of resolving the account's current role from users.txt. A… |
6,8 | 0,3 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-61843 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise upload-enabled shared-folder and upload-only links do not reject a destination filename that already exists. An unauthenticated visitor with a valid share token and any… |
8,2 | 0,37 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| sar2html | CVE-2026-110670 A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of the argument s2host results in sql injection. The attack can be launched remotely. The project was informed of the… |
6,9 | 0,27 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| OpenSIPS | CVE-2026-110679 A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtpproxy_answer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to… |
6,9 | 0,31 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| ClawScan | CVE-2026-110689 A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component Static Scanner. Performing a manipulation results in protection mechanism failure. Attacking locally is a requirement. The… |
1,9 | 0,13 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Tengine | CVE-2026-110694 A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function get_tm_file_model of the file source/serializer/tmfile/tm2_serializer.c of the component tmfile Model Loader. Such manipulation of the argument offset_root leads to out-of-bounds read. It is… |
2,1 | 0,25 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-104109 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise validates archive entry names but extracts them directly into the authorized live destination before validating resolved paths. If that destination already contains a… |
6,8 | 0,38 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-104110 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.24.0, FileRise Pro /api/pro/portals/get.php returns a configured client portal's full internal record to an unauthenticated caller who knows or guesses the portal slug. The response… |
5,3 | 0,31 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-103988 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authenticated, non-folder-scoped, non-administrator with a valid CSRF token against the source folder but does not… |
5,4 | 0,23 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FileRise | CVE-2026-104105 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that the same account and time step already succeeded. An attacker who has the… |
6,4 | 0,27 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 07:02 UTC – 15.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.