KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of service. Exploitation of this issue requires accessing a gateway call from…
Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software abort resulting in a denial of service.
Nieprawidłowa kontrola dostępu w Pexip Infinity pozwala na zdalne wykonanie kodu przez lokalnego atakującego.
Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an attacker to be able…
Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of service
Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of service.
Nieprawidłowa walidacja danych w Pexip Infinity prowadzi do awarii oprogramowania i odmowy usługi.
Uncontrolled recursion in the Gosub browser engine (gosub-engine) through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service (stack exhaustion and application crash) via an SVG document containing an excessive number…
Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw percent-encoded strings, whereas the template file is opened through a URL…
AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can submit tenant UUIDs via the add_tenants_to_portfolio endpoint to…
Błąd w AiSOC umożliwia atakującym dostęp do danych międzytenantowych bez uwierzytelnienia.
An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has completed the initial IKEv2 handshake to crash the iked process by sending a specially crafted encrypted IKEv2 message, resulting in a denial…
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest administrator account) to crash the wgagent process and read arbitrary files…
A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest administrator account) to crash the wgagent process and read arbitrary files…
A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service or potentially execute arbitrary code by sending a specially crafted…
A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent network access to execute arbitrary code or crash the process by sending a specially crafted DHCP…
An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of service by sending a specially crafted request.
An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a…
A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause a denial of service by sending a specially crafted IPv6 packet.
An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated attacker to crash the process by sending a specially crafted encrypted IKEv2 message negotiated with an AES-GCM cipher suite.
A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (samld) allows an attacker who has already obtained the ability to write files on the appliance to execute arbitrary code in the context of the…
A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRnetwork/ping. Such manipulation of the argument url leads to command injection. It is possible to launch the attack remotely. The…
A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function set_time_zone of the file /api/ZRFirmware/set_time_zone. This manipulation of the argument hostname/zonename causes command injection. It is possible to initiate the…
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specially crafted input strings with repeated patterns to cause exponential regex…
Wstrzyknięcie poleceń w Ziroom ZHOME umożliwia zdalne wykonanie kodu.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-103102 Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of… |
Monitoruj |
CVSS 8,6EPSS 0,32 % · nieaktualne | ||
| CVE-2026-103104 Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software abort… |
Monitoruj |
CVSS 7,5EPSS 0,31 % · nieaktualne | ||
| CVE-2026-103105 Nieprawidłowa kontrola dostępu w Pexip Infinity pozwala na zdalne wykonanie kodu przez lokalnego atakującego. |
Monitoruj |
CVSS 8,8EPSS 0,18 % · nieaktualne | ||
| CVE-2026-103106 Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to… |
Monitoruj |
CVSS 7,8EPSS 0,14 % · nieaktualne | ||
| CVE-2026-103108 Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort… |
Monitoruj |
CVSS 7,5EPSS 0,31 % · nieaktualne | ||
| CVE-2026-103099 Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of service. |
Monitoruj |
CVSS 7,5EPSS 0,31 % · nieaktualne | ||
| CVE-2026-103100 Nieprawidłowa walidacja danych w Pexip Infinity prowadzi do awarii oprogramowania i odmowy usługi. |
Monitoruj |
CVSS 7,5EPSS 0,26 % · nieaktualne | ||
| CVE-2026-103087 Uncontrolled recursion in the Gosub browser engine (gosub-engine) through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service (stack exhaustion and… |
Monitoruj |
CVSS 7,1EPSS 0,4 % · nieaktualne | ||
| CVE-2026-103088 Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw… |
Monitoruj |
CVSS 7,5EPSS 0,69 % · nieaktualne | ||
| CVE-2026-103054 AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can… |
Monitoruj |
CVSS 7,1EPSS 0,28 % · nieaktualne | ||
| CVE-2026-103055 Błąd w AiSOC umożliwia atakującym dostęp do danych międzytenantowych bez uwierzytelnienia. |
Monitoruj |
CVSS 8,7EPSS 0,53 % · nieaktualne | ||
| CVE-2026-86133 An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has completed the initial IKEv2 handshake to crash the iked process by… |
Monitoruj |
CVSS 7,5EPSS 0,35 % · nieaktualne | ||
| CVE-2026-86136 A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest… |
Monitoruj |
CVSS 8,1EPSS 0,3 % · nieaktualne | ||
| CVE-2026-90441 A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest… |
Monitoruj |
CVSS 8,1EPSS 0,23 % · nieaktualne | ||
| CVE-2026-18145 A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authenticated attacker with administrator privileges to crash the service… |
Monitoruj |
CVSS 7,2EPSS 0,39 % · nieaktualne | ||
| CVE-2026-81433 A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent network access to execute… |
Monitoruj |
CVSS 8,7EPSS 0,2 % · nieaktualne | ||
| CVE-2026-86104 An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of service by sending a specially… |
Monitoruj |
CVSS 7,5EPSS 0,37 % · nieaktualne | ||
| CVE-2026-86105 An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are… |
Monitoruj |
CVSS 7,1EPSS 0,31 % · nieaktualne | ||
| CVE-2026-86128 A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause a denial of service by sending a specially… |
Monitoruj |
CVSS 7,5EPSS 0,36 % · nieaktualne | ||
| CVE-2026-86132 An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated attacker to crash the process by sending a specially crafted encrypted… |
Monitoruj |
CVSS 7,5EPSS 0,36 % · nieaktualne | ||
| CVE-2026-13046 A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (samld) allows an attacker who has already obtained the ability to write… |
Monitoruj |
CVSS 7,2EPSS 0,37 % · nieaktualne | ||
| CVE-2026-102794 A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /api/ZRnetwork/ping. Such manipulation of the argument url leads to… |
Monitoruj |
CVSS 8,5EPSS 2,36 % · nieaktualne | ||
| CVE-2026-102793 A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function set_time_zone of the file /api/ZRFirmware/set_time_zone. This manipulation of the argument… |
Monitoruj |
CVSS 8,5EPSS 2,49 % · nieaktualne | ||
| CVE-2026-103043 anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specially… |
Monitoruj |
CVSS 8,7EPSS 0,59 % · nieaktualne | ||
| CVE-2026-102792 Wstrzyknięcie poleceń w Ziroom ZHOME umożliwia zdalne wykonanie kodu. |
Monitoruj |
CVSS 8,5EPSS 3,04 % · nieaktualne |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 13.11.2026, 07:02 UTC – 13.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.