Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| whisper-node | CVE-2026-110640 Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted filePath or whisperOptions.language values to whisper(). Attackers can inject shell metacharacters or $() substitution into the command string built by… |
9,3 | 2,73 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| @runnerty/executor-decompress | CVE-2026-110641 @runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted archive file names to compress_file. Attackers who can name a file dropped into a watched directory can inject $() substitutions or unquoted… |
8,7 | 2,51 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| xhtml2pdf | CVE-2026-110642 xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that allows attackers to execute commands by interpolating unescaped file names into os.system. Attackers can supply an input file whose name contains a double quote and shell metacharacters, which runs OS… |
8,5 | 1,13 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| transcribe2texts | CVE-2026-110643 transcribe2texts through 1.0.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted audioPath values to transcribeAudio(). Attackers can inject $() or backtick substitution or a closing quote into the unescaped path passed to… |
9,3 | 2,64 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| nodejs-whisper | CVE-2026-110644 nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers to execute commands by supplying crafted audio file paths. Attackers can provide file names containing $() command substitution or closing quotes, which are interpolated into an… |
9,3 | 2,73 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| MyReport Updater | CVE-2026-110632 Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the UpdateConfigReferent method. Attackers can point the updater to a malicious reference server serving modified module… |
9,2 | 0,67 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| MyReport Updater | CVE-2026-110633 MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the SYSTEM updater service install attacker-supplied archives into arbitrary directories. Attackers can use UpdaterManager.exe over gRPC to set a malicious reference server… |
8,5 | 0,14 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| git-diff | CVE-2026-110634 git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attackers who control a diffed document string can embed $(cmd) or backtick substitutions that shelljs.exec evaluates, running… |
9,3 | 2,35 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| webp-converter | CVE-2026-110635 webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile with shell enabled. Attackers controlling file names or option strings passed to cwebp, dwebp, gwebp, or webpmux functions can inject shell… |
9,3 | 2,52 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| pypdftk | CVE-2026-110636 pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands from caller-supplied paths. Attackers controlling pdf_path or out_file can inject shell metacharacters interpreted by subprocess.Popen with… |
9,3 | 2,69 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| buildebooks | CVE-2026-110637 buildebooks before 0.2.2 contains an OS command injection vulnerability in lib/kindle.js that allows attackers to execute commands by supplying a crafted EPUB file name passed to kindlegen via child_process.exec. Attackers can craft a book project with a malicious front-matter filename or project… |
8,5 | 1,15 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| doc-recog | CVE-2026-110638 doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog() or tag(). Attackers can embed $(...) or backtick command substitution in the file path, which DocData._readPDF passes to a shell-based… |
9,3 | 2,73 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| clipbucket-v5 | CVE-2026-110625 ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/flagged_item.php via the unencoded type GET parameter. Attackers can send crafted flagged_item.php?type= links to logged-in administrators or moderators to execute injected script in the admin… |
5,1 | 0,39 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| clipbucket-v5 | CVE-2026-110626 ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/language_settings.php via the unencoded edit_language GET parameter. Attackers can send administrators with basic_settings permission a crafted link whose payload is echoed into a hidden input,… |
5,1 | 0,39 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| clipbucket-v5 | CVE-2026-110627 ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/index.php that allows attackers to inject HTML via the val parameter in mode=add_todo. Attackers can lure a logged-in administrator into submitting a cross-site POST form without CSRF protection,… |
2,1 | 0,36 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| kan | CVE-2026-110628 Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix for CVE-2026-32255. When S3_ENDPOINT is unset, attackers can pass arbitrary url query parameters to fetch() to read internal services,… |
9,2 | 0,43 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| laravel-crm | CVE-2026-110629 VentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows authenticated users to bypass Spatie role permissions through Livewire action methods. Read-only users can invoke delete, won, lost or reopen methods on components like DealIndex, or use unguarded… |
7,1 | 0,57 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| laravel-crm | CVE-2026-110630 VentureDrake Laravel CRM before 2.4.0 contains an incorrect authorization vulnerability in user management that allows authenticated administrators to assign unrestricted roles via Role::find. Attackers with user-management access can assign the Owner role or other teams' roles and delete… |
7,0 | 0,64 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| komodo | CVE-2026-110631 Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty core_public_keys and passkeys lists fail open by default. Attackers reaching port 8120 can present any generated keypair to… |
9,3 | 0,86 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| SmsForwarder | CVE-2026-110618 SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or… |
8,6 | 0,39 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| frp | CVE-2026-110619 frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers are registered on the root mux outside Basic Authentication. Attackers can query /debug/pprof/ endpoints on frps dashboard or frpc… |
6,3 | 0,78 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| formbricks | CVE-2026-110620 Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetSurveyAction and updateSegmentAction that fail to verify resource ownership against the supplied organizationId. Authenticated owners or managers of any organization can pair their own organization… |
6,1 | 0,56 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| swetrix | CVE-2026-110621 Swetrix Cloud before 5.1.0 contains a missing authorization vulnerability in ProjectController.addProject that allows authenticated users to hijack arbitrary projects by moving them into their own organisation. Attackers can create an organisation and add a victim project by its public tracking ID… |
8,7 | 0,52 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| papermerge-core | CVE-2026-110622 Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to manipulate other users' pages because page management and OCR endpoints skip has_node_perm checks. Attackers knowing page UUIDs can call /pages/, /pages/move, or /pages/extract to… |
7,7 | 0,5 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| papermerge-core | CVE-2026-110623 Papermerge Core through 3.5.3 contains a missing authorization vulnerability in the shared nodes API that allows authenticated users to share other users' documents by supplying arbitrary node UUIDs. Attackers can call POST /shared-nodes or PATCH /shared-nodes/access/{node_id} to grant themselves… |
7,7 | 0,5 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 07:02 UTC – 15.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.