KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCP_Server_Info.rlist is allocated via kzalloc which zeros both ->next and ->prev to NULL instead of pointing to itself, making…
In the Linux kernel, the following vulnerability has been resolved: smb: client: cancel reconnect work in clean_demultiplex_info() clean_demultiplex_info() cancels server->echo delayed work but not server->reconnect, which can cause a use-after-free when…
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix swapped-out resources never leaving their bulk_move range ttm_tt_swapout() returns the number of pages swapped out on success and a negative error code on failure; for a…
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3_enum_snapshots() If snapshot_array_size is smaller than GMT_TOKEN_SIZE, smb3_enum_snapshots() sets ret_data_len to sizeof(struct…
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receive_encrypted_standard()'s handling of…
Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack <= 6.2.13 versions.
Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored ciphertext to make it decrypt to a chosen value via bit…
Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions.
Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege Escalation.This issue affects SMS Alert Order Notifications: from n/a through 4.0.0.
SQL injection (SQLi) vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully…
Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section. <= 2.0.3 versions.
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions <= 3.0.10 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.4.6 versions.
Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1.
Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.
Unauthenticated Broken Access Control in Sermon'e <= 1.0.2 versions.
Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions.
Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 versions.
Subscriber SQL Injection in ListingPro <= 2.9.12 versions.
Subscriber SQL Injection in UDesign Core <= 4.15.0 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Socialrocket Social Rocket social-rocket allows Reflected XSS.This issue affects Social Rocket: from n/a through 1.3.5.
Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.
Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions.
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 versions.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-98174 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCP_Server_Info.rlist is allocated via kzalloc which zeros both… |
Monitoruj |
CVSS 7,5EPSS 0,33 % | ||
| CVE-2026-98175 In the Linux kernel, the following vulnerability has been resolved: smb: client: cancel reconnect work in clean_demultiplex_info() clean_demultiplex_info() cancels server->echo delayed… |
Monitoruj |
CVSS 7,5EPSS 0,32 % | ||
| CVE-2026-98166 In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix swapped-out resources never leaving their bulk_move range ttm_tt_swapout() returns the number of pages… |
Monitoruj |
CVSS 7,8EPSS 0,16 % | ||
| CVE-2026-98169 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3_enum_snapshots() If snapshot_array_size is smaller than… |
Monitoruj |
CVSS 7,1EPSS 0,45 % | ||
| CVE-2026-98171 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and… |
Monitoruj |
CVSS 8,8EPSS 0,54 % | ||
| CVE-2026-94675 Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack <= 6.2.13 versions. |
Monitoruj |
CVSS 7,1EPSS 0,18 % | ||
| CVE-2026-95105 Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored… |
Monitoruj |
CVSS 8,2EPSS 0,13 % | ||
| CVE-2026-95526 Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions. |
Monitoruj |
CVSS 7,3EPSS 0,21 % | ||
| CVE-2026-95594 Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege Escalation.This issue affects SMS Alert Order… |
Monitoruj |
CVSS 8,1EPSS 0,21 % | ||
| CVE-2026-4889 SQL injection (SQLi) vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is… |
Monitoruj |
CVSS 7,8EPSS 0,3 % | ||
| CVE-2026-62072 Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions. |
Monitoruj |
CVSS 8,8EPSS 0,32 % | ||
| CVE-2026-42634 Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section. <= 2.0.3 versions. |
Monitoruj |
CVSS 7,1EPSS 0,23 % | ||
| CVE-2026-42635 Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions <= 3.0.10 versions. |
Monitoruj |
CVSS 7,1EPSS 0,23 % | ||
| CVE-2026-42636 Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.4.6 versions. |
Monitoruj |
CVSS 7,1EPSS 0,23 % | ||
| CVE-2026-42638 Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
Monitoruj |
CVSS 7,5EPSS 0,25 % | ||
| CVE-2026-48197 Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities:… |
Monitoruj |
CVSS 7,2EPSS 0,43 % | ||
| CVE-2026-48199 Unauthenticated Broken Access Control in Sermon'e <= 1.0.2 versions. |
Monitoruj |
CVSS 7,5EPSS 0,37 % | ||
| CVE-2026-41562 Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions. |
Monitoruj |
CVSS 7,5EPSS 0,3 % | ||
| CVE-2026-42413 Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 versions. |
Monitoruj |
CVSS 7,5EPSS 0,3 % | ||
| CVE-2026-42414 Subscriber SQL Injection in ListingPro <= 2.9.12 versions. |
Monitoruj |
CVSS 8,5EPSS 0,27 % | ||
| CVE-2026-42416 Subscriber SQL Injection in UDesign Core <= 4.15.0 versions. |
Monitoruj |
CVSS 8,5EPSS 0,27 % | ||
| CVE-2026-42418 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Socialrocket Social Rocket social-rocket allows Reflected XSS.This issue affects… |
Monitoruj |
CVSS 7,1EPSS 0,23 % | ||
| CVE-2026-40806 Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions. |
Monitoruj |
CVSS 7,1EPSS 0,18 % | ||
| CVE-2026-40807 Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions. |
Monitoruj |
CVSS 7,1EPSS 0,18 % | ||
| CVE-2026-41559 Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 versions. |
Monitoruj |
CVSS 7,5EPSS 0,3 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 9.11.2026, 07:32 UTC – 9.11.2026, 09:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.