Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL | CVE-2026-105776 A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admin_transaction.php. This manipulation of the argument Username causes sql… |
5,5 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Snapdragon | CVE-2026-25263 Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. |
6,6 | 0,06 % | Brak wpisu w KEV nie wyklucza ataków | |
| WP Event Solution | CVE-2026-97300 Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions. |
6,5 | 0,21 % | Brak wpisu w KEV nie wyklucza ataków | |
| imgproxy | CVE-2026-105708 A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Executing a manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has… |
2,1 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| vLLM | CVE-2026-105775 A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible… |
2,1 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Faktur Pro for WooCommerce | CVE-2026-32576 Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Faktur Pro for WooCommerce: from n/a through 3.2.2. |
6,5 | 0,21 % | Brak wpisu w KEV nie wyklucza ataków | |
| IATO MCP | CVE-2026-32582 Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a through 1.12.0. |
6,5 | 0,17 % | Brak wpisu w KEV nie wyklucza ataków | |
| WDS MCP Content Manager | CVE-2026-39599 Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions. |
4,3 | 0,15 % | Brak wpisu w KEV nie wyklucza ataków | |
| Drug Recommendation System | CVE-2026-105706 A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. |
2,1 | 0,16 % | Brak wpisu w KEV nie wyklucza ataków | |
| uptrace | CVE-2026-105707 A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/user_handler.go. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit has… |
5,5 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Drug Recommendation System | CVE-2026-105704 A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument user_id leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and… |
5,5 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Drug Recommendation System | CVE-2026-105705 A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/add_drug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the… |
2,1 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| jshERP | CVE-2026-105621 A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in improper… |
2,1 | 0,23 % | Brak wpisu w KEV nie wyklucza ataków | |
| User Registration & Login and User Management System | CVE-2026-105703 A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes… |
2,0 | 0,23 % | Brak wpisu w KEV nie wyklucza ataków | |
| SpringBlade | CVE-2026-105611 A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/RoleController.java of the component User Detail Endpoint. This manipulation of the argument ID causes… |
2,0 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| newbee-mall | CVE-2026-105573 A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component Shopping Cart Quantity Handler. Performing a manipulation of the argument goodsCount results in business logic errors.… |
2,1 | 0,23 % | Brak wpisu w KEV nie wyklucza ataków | |
| SpringBlade | CVE-2026-105610 A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Parameter Submit Management. The manipulation of the argument… |
2,0 | 0,23 % | Brak wpisu w KEV nie wyklucza ataków | |
| PickMall Lilishop | CVE-2026-105572 A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The… |
2,1 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| srs | CVE-2026-105486 A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit is now public and… |
5,5 | 0,5 % | Brak wpisu w KEV nie wyklucza ataków | |
| reNgine | CVE-2026-105487 A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomain_discovery of the file web/reNgine/tasks.py of the component listTargets Endpoint. The manipulation of the argument Name results in os command injection. The attack can be launched… |
2,1 | 1,09 % | Brak wpisu w KEV nie wyklucza ataków | |
| PickMall Lilishop | CVE-2026-105571 A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding. This manipulation of the argument Username causes improper authorization. It is possible to initiate the attack… |
5,5 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| sssd / Red Hat OpenShift Container Platform 4 / Red Hat OpenShift Container Platform 5 | CVE-2026-104039 A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services. When handling Generic Security Services Application Programming Interface (GSSAPI) authentication in the Pluggable Authentication Module (PAM) responder, cached connection state… |
5,5 | 0,13 % | Brak wpisu w KEV nie wyklucza ataków | |
| sssd / Red Hat OpenShift Container Platform 4 / Red Hat OpenShift Container Platform 5 | CVE-2026-104041 A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch (NSS) responder. Because the negative cache does not limit the total number of stored entries and only removes expired records when an existing key is… |
5,5 | 0,14 % | Brak wpisu w KEV nie wyklucza ataków | |
| sssd / Red Hat OpenShift Container Platform 4 / Red Hat OpenShift Container Platform 5 | CVE-2026-104042 A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication Module (PAM) request containing a zero-length authentication token to the responder socket. Due to missing input validation, the service attempts to read beyond buffer… |
5,5 | 0,15 % | Brak wpisu w KEV nie wyklucza ataków | |
| sssd / Red Hat OpenShift Container Platform 4 / Red Hat OpenShift Container Platform 5 | CVE-2026-104043 A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the… |
5,5 | 0,1 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 14.11.2026, 15:02 UTC – 14.11.2026, 20:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.