p.podatnosc.pl
ZakresWszystkie technologie
WszystkieObserwowaneUstaw technologie

KATALOG PODATNOŚCI

Baza CVE

Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.

Więcej filtrów · producent, sygnały, CVSS

Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.

Wyświetlono 9751–9775 z 101 327 dopasowań.

CVE-2026-112011

libtta through 2.3 contains an integer overflow vulnerability in tta_decoder_init_get_info() that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header fields. Attackers can supply a crafted .tta file with a sample rate of…

PozostałeOpis źródłowy · EN
CVSS
5,8
EPSS
0,14 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112012

libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in tta_decoder_process_stream() and tta_decoder_process_frame() because header checks never reject a zero channel count. Attackers can supply a crafted .tta file declaring zero…

PozostałeOpis źródłowy · EN
CVSS
4,8
EPSS
0,13 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112000

Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to call Subscribe, Ack, and unregistered methods without permission checks. Attackers can supply another tenant's subscription ID to…

MonitorujOpis źródłowy · EN
CVSS
7,2
EPSS
0,29 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112001

ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restricted API token holders to change the token owner's credentials via PATCH /api/v1/users/{user}. Attackers with a token limited to manage_users and edit_users…

MonitorujOpis źródłowy · EN
CVSS
8,6
EPSS
0,49 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112002

ProjectSend 2.5.0 before 2.7.0 contains an unverified password change vulnerability in PasswordController::update() that lets sessions of Social-provisioned accounts set local passwords without the current password. Attackers holding a stolen session cookie…

MonitorujOpis źródłowy · EN
CVSS
7,6
EPSS
0,29 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112003

ProjectSend 2.0.0 before 2.7.0 contains a path validation flaw in OrphanFileScanner::isOrphan() that allows staff with import_orphans permission to treat tracked files as orphans. Attackers can submit ./ path aliases to the orphans import or delete…

PozostałeOpis źródłowy · EN
CVSS
6,0
EPSS
0,36 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112004

Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks…

PozostałeOpis źródłowy · EN
CVSS
2,3
EPSS
0,26 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112005

WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions through the query editor. Attackers can log in to a DuckDB file without…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,2
EPSS
0,69 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112006

OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate validation vulnerability that disables TLS verification when OTEL_EXPORTER_OTLP_CERTIFICATE variables are empty strings. Man-in-the-middle attackers can…

MonitorujOpis źródłowy · EN
CVSS
8,3
EPSS
0,22 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-111984

A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function create_item_html of the file modules/ui_extra_networks.py of the component Card Builder. The manipulation of the argument filename leads to cross…

PozostałeOpis źródłowy · EN
CVSS
2,1
EPSS
0,46 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-111985

A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function read_metadata_from_safetensors of the file modules/sd_models.py of the component Metadata Extraction. The manipulation of the argument header length…

PozostałeOpis źródłowy · EN
CVSS
2,1
EPSS
0,55 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-111998

Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. Attackers can send the fixed Bearer token to the gateway gRPC proxy port to…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,3
EPSS
0,53 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-111999

Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents HTTP receiver. Attackers can send forged CloudEvents to the…

MonitorujOpis źródłowy · EN
CVSS
8,7
EPSS
0,53 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110880

Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit): from n/a through 3.4.6.

PozostałeOpis źródłowy · EN
CVSS
6,5
EPSS
0,19 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110883

Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way VideoCalls and Random Chat: from n/a through 6.1.5.

PozostałeOpis źródłowy · EN
CVSS
6,5
EPSS
0,25 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110885

Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Code Injection.This issue affects HivePress: from n/a through 1.7.32.

PozostałeOpis źródłowy · EN
CVSS
6,5
EPSS
0,27 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110886

Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,31 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110895

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems Support Genix support-genix-lite allows SQL Injection.This issue affects Support Genix: from n/a through 1.4.54.

MonitorujOpis źródłowy · EN
CVSS
8,5
EPSS
0,26 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110897

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder allows Stored XSS.This issue affects PowerPack Lite for Beaver…

MonitorujOpis źródłowy · EN
CVSS
7,1
EPSS
0,18 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-108485

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill eStore estore allows Reflected XSS.This issue affects eStore: from n/a through 1.6.13.

MonitorujOpis źródłowy · EN
CVSS
7,1
EPSS
0,18 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-109894

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics booktics allows SQL Injection.This issue affects Booktics: from n/a through 1.0.29.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,3
EPSS
0,24 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-109895

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Booktics booktics allows DOM-Based XSS.This issue affects Booktics: from n/a through 1.0.29.

MonitorujOpis źródłowy · EN
CVSS
7,1
EPSS
0,18 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110365

Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through 5.4.14.

PozostałeOpis źródłowy · EN
CVSS
6,5
EPSS
0,24 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110372

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,27 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110373

Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77.

MonitorujOpis źródłowy · EN
CVSS
8,1
EPSS
0,27 %
Publikacja
Poprawka
Status poprawki nieustalony
Podatności: CVE, produkt, opis, sygnały zagrożenia, CVSS, EPSS i data publikacji.
CVE / produktSygnałyOcenyPublikacjaZapisz
CVE-2026-112011

libtta through 2.3 contains an integer overflow vulnerability in tta_decoder_init_get_info() that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated header…
Pozostałe
 CVSS 5,8EPSS 0,14 %
CVE-2026-112012

libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in tta_decoder_process_stream() and tta_decoder_process_frame() because header checks never reject a zero…
Pozostałe
 CVSS 4,8EPSS 0,13 %
CVE-2026-112000

Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to call Subscribe, Ack, and unregistered methods without…
Monitoruj
 CVSS 7,2EPSS 0,29 %
CVE-2026-112001

ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restricted API token holders to change the token owner's credentials via PATCH…
Monitoruj
 CVSS 8,6EPSS 0,49 %
CVE-2026-112002

ProjectSend 2.5.0 before 2.7.0 contains an unverified password change vulnerability in PasswordController::update() that lets sessions of Social-provisioned accounts set local passwords…
Monitoruj
 CVSS 7,6EPSS 0,29 %
CVE-2026-112003

ProjectSend 2.0.0 before 2.7.0 contains a path validation flaw in OrphanFileScanner::isOrphan() that allows staff with import_orphans permission to treat tracked files as orphans.…
Pozostałe
 CVSS 6,0EPSS 0,36 %
CVE-2026-112004

Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The…
Pozostałe
 CVSS 2,3EPSS 0,26 %
CVE-2026-112005

WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions through the…
Wysoki priorytet
 CVSS 9,2EPSS 0,69 %
CVE-2026-112006

OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate validation vulnerability that disables TLS verification when…
Monitoruj
 CVSS 8,3EPSS 0,22 %
CVE-2026-111984

A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function create_item_html of the file modules/ui_extra_networks.py of the component…
Pozostałe
 CVSS 2,1EPSS 0,46 %
CVE-2026-111985

A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function read_metadata_from_safetensors of the file modules/sd_models.py of the component…
Pozostałe
 CVSS 2,1EPSS 0,55 %
CVE-2026-111998

Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token.…
Wysoki priorytet
 CVSS 9,3EPSS 0,53 %
CVE-2026-111999

Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEvents…
Monitoruj
 CVSS 8,7EPSS 0,53 %
CVE-2026-110880

Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly…
Pozostałe
 CVSS 6,5EPSS 0,19 %
CVE-2026-110883

Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Way…
Pozostałe
 CVSS 6,5EPSS 0,25 %
CVE-2026-110885

Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Code Injection.This issue affects HivePress: from n/a through 1.7.32.
Pozostałe
 CVSS 6,5EPSS 0,27 %
CVE-2026-110886

Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for…
Wysoki priorytet
 CVSS 9,8EPSS 0,31 %
CVE-2026-110895

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems Support Genix support-genix-lite allows SQL Injection.This issue affects…
Monitoruj
 CVSS 8,5EPSS 0,26 %
CVE-2026-110897

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder…
Monitoruj
 CVSS 7,1EPSS 0,18 %
CVE-2026-108485

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill eStore estore allows Reflected XSS.This issue affects eStore: from n/a…
Monitoruj
 CVSS 7,1EPSS 0,18 %
CVE-2026-109894

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics booktics allows SQL Injection.This issue affects Booktics: from n/a…
Wysoki priorytet
 CVSS 9,3EPSS 0,24 %
CVE-2026-109895

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Booktics booktics allows DOM-Based XSS.This issue affects Booktics: from n/a…
Monitoruj
 CVSS 7,1EPSS 0,18 %
CVE-2026-110365

Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
Pozostałe
 CVSS 6,5EPSS 0,24 %
CVE-2026-110372

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.
Wysoki priorytet
 CVSS 9,8EPSS 0,27 %
CVE-2026-110373

Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from…
Monitoruj
 CVSS 8,1EPSS 0,27 %
Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 5.11.2026, 07:32 UTC – 5.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.

Więcej możliwości