KATALOG PODATNOŚCI
Chronologiczny przegląd publikacji. Ostatnie modyfikacje są w osobnym widoku.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Crawl4AI before 0.9.5 contains a blind server-side request forgery vulnerability in the Docker server that allows API clients to bypass the egress proxy by enabling check_cache_freshness. Attackers can cache a controlled URL, then trigger CacheValidator to…
ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attackers can supply a crafted image file for processing to trigger the stack overflow and crash the application, causing…
Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.
Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions.
Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions.
Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions.
KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0, KeePassXC browser integration encrypts authorized responses in src/browser/BrowserMessageBuilder.cpp using a fixed 1 MiB output…
Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.
Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions.
Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.
Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.
Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.
Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Object Injection.This issue affects FV Flowplayer Video Player: from n/a through 7.5.56.7212.
Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.
Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.
Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions.
Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions.
Contributor PHP Object Injection in Dynamic QR Code – generator <= 1.0.1 versions.
Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions.
Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions.
Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Innovations The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Stored XSS.This issue affects The…
P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next block in DCP Set and Identify requests. If the last block ends at the end of the receive buffer, the block length of the following block is…
P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is rejected because its data representation has incorrect endianness. The session and its AR remain allocated, so repeated requests exhaust the…
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-119122 Crawl4AI before 0.9.5 contains a blind server-side request forgery vulnerability in the Docker server that allows API clients to bypass the egress proxy by enabling check_cache_freshness.… |
Pozostałe |
CVSS 6,9EPSS 0,37 % | ||
| CVE-2026-119123 ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attackers can supply a crafted image file for… |
Monitoruj |
CVSS 7,5EPSS 0,35 % | ||
| CVE-2026-118082 Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions. |
Monitoruj |
CVSS 8,8EPSS 0,36 % | ||
| CVE-2026-118083 Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions. |
Monitoruj |
CVSS 7,5EPSS 0,3 % | ||
| CVE-2026-118084 Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions. |
Pozostałe |
CVSS 6,5EPSS 0,33 % | ||
| CVE-2026-118085 Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions. |
Monitoruj |
CVSS 7,1EPSS 0,18 % | ||
| CVE-2026-118673 KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. From 2.3.0 until 2.8.0, KeePassXC browser integration encrypts authorized responses in… |
Pozostałe |
CVSS 4,1EPSS 0,11 % | ||
| CVE-2026-118074 Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions. |
Monitoruj |
CVSS 7,2EPSS 0,3 % | ||
| CVE-2026-118075 Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions. |
Monitoruj |
CVSS 8,8EPSS 0,37 % | ||
| CVE-2026-118076 Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions. |
Monitoruj |
CVSS 8,8EPSS 0,37 % | ||
| CVE-2026-118077 Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions. |
Monitoruj |
CVSS 7,2EPSS 0,3 % | ||
| CVE-2026-118078 Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions. |
Monitoruj |
CVSS 7,2EPSS 0,3 % | ||
| CVE-2026-118079 Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Object Injection.This issue affects FV Flowplayer Video Player:… |
Monitoruj |
CVSS 7,2EPSS 0,3 % | ||
| CVE-2026-118080 Contributor PHP Object Injection in Social Snap <= 1.5.4 versions. |
Monitoruj |
CVSS 8,8EPSS 0,37 % | ||
| CVE-2026-118081 Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions. |
Monitoruj |
CVSS 8,8EPSS 0,37 % | ||
| CVE-2026-116864 Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions. |
Monitoruj |
CVSS 7,2EPSS 0,3 % | ||
| CVE-2026-116865 Editor PHP Object Injection in Zippy <= 1.7.0 versions. |
Monitoruj |
CVSS 7,2EPSS 0,3 % | ||
| CVE-2026-116866 Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions. |
Monitoruj |
CVSS 8,8EPSS 0,29 % | ||
| CVE-2026-116867 Contributor PHP Object Injection in Dynamic QR Code – generator <= 1.0.1 versions. |
Monitoruj |
CVSS 8,8EPSS 0,37 % | ||
| CVE-2026-116868 Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions. |
Monitoruj |
CVSS 8,8EPSS 0,45 % | ||
| CVE-2026-116869 Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions. |
Monitoruj |
CVSS 7,2EPSS 0,3 % | ||
| CVE-2026-118073 Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. |
Monitoruj |
CVSS 8,8EPSS 0,39 % | ||
| CVE-2026-116848 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Innovations The Plus Addons for Elementor Page Builder Lite… |
Pozostałe |
CVSS 6,5EPSS 0,13 % | ||
| CVE-2026-115795 P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next block in DCP Set and Identify requests. If the last block ends at the… |
Pozostałe |
CVSS 5,3EPSS 0,17 % | ||
| CVE-2026-112200 P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is rejected because its data representation has incorrect endianness. The… |
Monitoruj |
CVSS 8,7EPSS 0,41 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 10.11.2026, 23:32 UTC – 11.11.2026, 01:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.