p.podatnosc.pl
ZakresWszystkie technologie
WszystkieObserwowaneUstaw technologie

KATALOG PODATNOŚCI

Publikacje w kolejności czasu

Chronologiczny przegląd publikacji. Ostatnie modyfikacje są w osobnym widoku.

Więcej filtrów · producent, sygnały, CVSS

Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.

Wyświetlono 6401–6425 z 102 994 dopasowań.

CVE-2026-114409

Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due to insufficient IPC payload redaction. An attacker with read access to these files could obtain…

PozostałeOpis źródłowy · EN
CVSS
5,7
EPSS
0,11 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-116627

Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission to execute arbitrary…

MonitorujOpis źródłowy · EN
CVSS
8,7
EPSS
0,16 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-15586

Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute Force. This issue affects Ontime: through 2026-10-27.  NOTE: The vendor was contacted early about this disclosure…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,21 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-100164

Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting. This issue affects Agentis: before 4.8.

MonitorujOpis źródłowy · EN
CVSS
7,5
EPSS
0,3 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-107590

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an internal buffer. This…

PozostałeOpis źródłowy · EN
CVSS
1,9
EPSS
0,12 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-4337

Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of file to the server, and to any path where the web server user has write permissions. This could also allow them to…

MonitorujOpis źródłowy · EN
CVSS
8,8
EPSS
0,33 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-56084

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Server-Side…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,21 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-90728

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper…

PozostałeOpis źródłowy · EN
CVSS
6,3
EPSS
0,1 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-90729

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper…

PozostałeOpis źródłowy · EN
CVSS
6,7
EPSS
0,22 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-90730

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Access…

PozostałeOpis źródłowy · EN
CVSS
6,5
EPSS
0,2 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-90731

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based…

PozostałeOpis źródłowy · EN
CVSS
4,9
EPSS
0,26 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-90732

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based…

PozostałeOpis źródłowy · EN
CVSS
4,9
EPSS
0,26 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-115216

In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contacts the Controller API and when it logs in to an external OIDC issuer. An on-path attacker can present any certificate, capture the OAuth…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,1
EPSS
0,24 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-115408

In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8`, the ML-KEM key-pair lookup functions (`FindMLKEMKeyPair`, `FindMLKEMKeyPairs`, `FindMLKEMKeyPairsWithAttributes`) locate the public half of an ML-KEM key pair by…

PozostałeOpis źródłowy · EN
CVSS
5,5
EPSS
0,08 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-117499

@fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavior, a request that restored a session before a logout could save its own copy after another request had completed the session destroy…

PozostałeOpis źródłowy · EN
CVSS
3,7
EPSS
0,09 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-13162

An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the device. The vulnerability exists in the configuration daemon's time synchronization…

MonitorujOpis źródłowy · EN
CVSS
7,7
EPSS
0,19 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-41020

Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain unauthorized access to the device.

MonitorujOpis źródłowy · EN
CVSS
7,5
EPSS
0,23 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-41021

Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing attack and potentially recover user credentials.

MonitorujOpis źródłowy · EN
CVSS
7,5
EPSS
0,18 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-41022

Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercept or modify communications between easySoft and easyE4.

PozostałeOpis źródłowy · EN
CVSS
5,9
EPSS
0,08 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-113644

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands (`edgelet provision` and `edgelet config cert` on supported…

PozostałeOpis źródłowy · EN
CVSS
5,5
EPSS
0,18 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-102800

Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - The “was this article helpful” voting widget posts a client-supplied ip field to its AJAX handlers (getDeny, getConfirm, getDenyReason in…

MonitorujOpis źródłowy · EN
CVSS
8,7
EPSS
0,39 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-105323

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and Telecommunications Limited Company Kulga News Software allows Reflected XSS. This issue affects Kulga News Software: from v26.7.4 before…

PozostałeOpis źródłowy · EN
CVSS
6,1
EPSS
0,18 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-106087

TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, including sensitive configuration files and password data, resulting in the…

MonitorujOpis źródłowy · EN
CVSS
8,7
EPSS
0,25 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-10752

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 0.9.2.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it…

PozostałeOpis źródłowy · EN
CVSS
4,8
EPSS
0,25 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-10756

TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost. By leveraging port forwarding, an attacker can interact with locally bound ports and…

MonitorujOpis źródłowy · EN
CVSS
7,7
EPSS
0,18 %
Publikacja
Poprawka
Status poprawki nieustalony
Podatności: CVE, produkt, opis, sygnały zagrożenia, CVSS, EPSS i data publikacji.
CVE / produktSygnałyOcenyPublikacjaZapisz
CVE-2026-114409

Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due to insufficient IPC payload…
Pozostałe
 CVSS 5,7EPSS 0,11 %
CVE-2026-116627

Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an…
Monitoruj
 CVSS 8,7EPSS 0,16 %
CVE-2026-15586

Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute Force. This issue affects Ontime: through…
Pozostałe
 CVSS 5,3EPSS 0,21 %
CVE-2026-100164

Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting. This issue affects Agentis:…
Monitoruj
 CVSS 7,5EPSS 0,3 %
CVE-2026-107590

An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions,…
Pozostałe
 CVSS 1,9EPSS 0,12 %
CVE-2026-4337

Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of file to the server, and to any path where the…
Monitoruj
 CVSS 8,8EPSS 0,33 %
CVE-2026-56084

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Pozostałe
 CVSS 5,3EPSS 0,21 %
CVE-2026-90728

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Pozostałe
 CVSS 6,3EPSS 0,1 %
CVE-2026-90729

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Pozostałe
 CVSS 6,7EPSS 0,22 %
CVE-2026-90730

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Pozostałe
 CVSS 6,5EPSS 0,2 %
CVE-2026-90731

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Pozostałe
 CVSS 4,9EPSS 0,26 %
CVE-2026-90732

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40,…
Pozostałe
 CVSS 4,9EPSS 0,26 %
CVE-2026-115216

In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contacts the Controller API and when it logs in to an external OIDC…
Wysoki priorytet
 CVSS 9,1EPSS 0,24 %
CVE-2026-115408

In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8`, the ML-KEM key-pair lookup functions (`FindMLKEMKeyPair`, `FindMLKEMKeyPairs`,…
Pozostałe
 CVSS 5,5EPSS 0,08 %
CVE-2026-117499

@fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavior, a request that restored a session before a logout could save its…
Pozostałe
 CVSS 3,7EPSS 0,09 %
CVE-2026-13162

An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the device. The…
Monitoruj
 CVSS 7,7EPSS 0,19 %
CVE-2026-41020

Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication…
Monitoruj
 CVSS 7,5EPSS 0,23 %
CVE-2026-41021

Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing attack and…
Monitoruj
 CVSS 7,5EPSS 0,18 %
CVE-2026-41022

Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and…
Pozostałe
 CVSS 5,9EPSS 0,08 %
CVE-2026-113644

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell…
Pozostałe
 CVSS 5,5EPSS 0,18 %
CVE-2026-102800

Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - The “was this article helpful” voting widget posts a client-supplied ip field to its AJAX…
Monitoruj
 CVSS 8,7EPSS 0,39 %
CVE-2026-105323

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and Telecommunications Limited Company Kulga News Software allows…
Pozostałe
 CVSS 6,1EPSS 0,18 %
CVE-2026-106087

TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, including…
Monitoruj
 CVSS 8,7EPSS 0,25 %
CVE-2026-10752

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 0.9.2.6. This is due to the plugin not properly…
Pozostałe
 CVSS 4,8EPSS 0,25 %
CVE-2026-10756

TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost. By leveraging…
Monitoruj
 CVSS 7,7EPSS 0,18 %
Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 10.11.2026, 03:02 UTC – 10.11.2026, 04:32 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.

Więcej możliwości