KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by supplying mismatched memory buffers during event buffer setup. A successful exploit of this vulnerability might lead to…
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of…
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources, leaving a mapping accessible after the underlying memory is reused. A successful exploit of this…
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution,…
NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and…
External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.
apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related issue to CVE-2026-15544.
Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files. This issue affects MediaWiki Wikibase extension: 1.46, 1.45, and 1.43.
A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqli_query of the file admin/delete1.php of the component Unauthenticated Action Script. Performing a…
Luki w JetBrains YouTrack pozwalają gościom usuwać ograniczenia widoczności akcji.
Brak autoryzacji w JetBrains YouTrack umożliwia nadpisanie szablonów powiadomień przez użytkowników z dostępem tylko do odczytu.
Wykonanie złośliwego kodu w JetBrains IntelliJ IDEA umożliwia atak w niezaufanych projektach.
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27.
Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through 2026-09-29.
AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware.…
OpenSave through 2.4.0 fails to properly validate save paths supplied by paired peers in the manifest request handler. Attackers can specify arbitrary directories outside configured save locations to read and write files through manifest and sync routes.
LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pause_generation, /abort_request, /flush_cache, and /init_weights_update_group to…
Astro is a web framework for content-driven websites. Prior to 11.1.3, the @astrojs/node adapter builds a request URL from the Host header, and a malformed port can make that URL invalid. The recovery path reuses the same malformed host and throws an…
MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash
Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature), oc-mirror extracts tar entries from catalog image…
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.6.
Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions.
Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-47501 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by supplying mismatched memory buffers during event… |
Monitoruj |
CVSS 7,8EPSS 0,15 % | ||
| CVE-2026-47489 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this… |
Monitoruj |
CVSS 7,8EPSS 0,13 % | ||
| CVE-2026-47491 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources, leaving a mapping… |
Monitoruj |
CVSS 7,8EPSS 0,15 % | ||
| CVE-2026-47493 NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A… |
Monitoruj |
CVSS 7,8EPSS 0,11 % | ||
| CVE-2026-47494 NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerability might lead to code… |
Monitoruj |
CVSS 7,8EPSS 0,15 % | ||
| CVE-2026-103442 External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki… |
Monitoruj |
CVSS 7,2EPSS 0,28 % | ||
| CVE-2026-103432 apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related issue to… |
Monitoruj |
CVSS 8,1EPSS 0,38 % | ||
| CVE-2026-103441 Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files. This issue affects… |
Monitoruj |
CVSS 7,2EPSS 0,28 % | ||
| CVE-2026-103229 A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqli_query of the file… |
Monitoruj |
CVSS 7,3EPSS 0,33 % | ||
| CVE-2026-100276 Luki w JetBrains YouTrack pozwalają gościom usuwać ograniczenia widoczności akcji. |
Monitoruj |
CVSS 7,5EPSS 0,22 % | ||
| CVE-2026-100262 Brak autoryzacji w JetBrains YouTrack umożliwia nadpisanie szablonów powiadomień przez użytkowników z dostępem tylko do odczytu. |
Monitoruj |
CVSS 7,1EPSS 0,21 % | ||
| CVE-2026-100256 Wykonanie złośliwego kodu w JetBrains IntelliJ IDEA umożliwia atak w niezaufanych projektach. |
Monitoruj |
CVSS 7,8EPSS 0,13 % | ||
| CVE-2026-100253 In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL |
Monitoruj |
CVSS 8,8EPSS 0,44 % | ||
| CVE-2026-100254 In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings |
Monitoruj |
CVSS 8,8EPSS 0,47 % | ||
| CVE-2026-62097 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This… |
Monitoruj |
CVSS 7,6EPSS 0,23 % | ||
| CVE-2026-18783 Missing authentication for critical function vulnerability in Trex Digital Smart Manufacturing Systems Inc. Trex MES allows Authentication Bypass. This issue affects Trex MES: through… |
Monitoruj |
CVSS 8,8EPSS 0,35 % | ||
| CVE-2026-47097 AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static… |
Monitoruj |
CVSS 8,7EPSS 0,38 % | ||
| CVE-2026-103398 OpenSave through 2.4.0 fails to properly validate save paths supplied by paired peers in the manifest request handler. Attackers can specify arbitrary directories outside configured save… |
Monitoruj |
CVSS 8,6EPSS 0,27 % | ||
| CVE-2026-103270 LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like… |
Monitoruj |
CVSS 8,7EPSS 0,51 % | ||
| CVE-2026-102984 Astro is a web framework for content-driven websites. Prior to 11.1.3, the @astrojs/node adapter builds a request URL from the Host header, and a malformed port can make that URL invalid.… |
Monitoruj |
CVSS 8,2EPSS 0,36 % | ||
| CVE-2026-102717 MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash |
Monitoruj |
CVSS 7,5EPSS 0,26 % | ||
| CVE-2026-101295 Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature path… |
Monitoruj |
CVSS 7,3EPSS 0,15 % | ||
| CVE-2026-97289 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This issue… |
Monitoruj |
CVSS 7,1EPSS 0,14 % | ||
| CVE-2026-97293 Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions. |
Monitoruj |
CVSS 8,5EPSS 0,24 % | ||
| CVE-2026-97271 Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions. |
Monitoruj |
CVSS 7,1EPSS 0,14 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 12.11.2026, 19:02 UTC – 13.11.2026, 00:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.