KATALOG PODATNOŚCI

Baza CVE

Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.

Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.

CVE-2026-66055

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the…

MonitorujOpis źródłowy · EN

CVSS: 8,2
EPSS: 0,28 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-104733

User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attacker to impersonate arbitrary users via unvalidated authzid parameter in SASL-PLAIN mechanism.

MonitorujOpis źródłowy · EN

CVSS: 7,4
EPSS: 0,22 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-104611

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast_setting_internet_set of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer…

MonitorujOpis źródłowy · EN

CVSS: 8,5
EPSS: 0,49 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94653

Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

MonitorujOpis źródłowy · EN

CVSS: 8,2
EPSS: 0,28 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-96288

Uncontrolled Recursion, Allocation of resources without limits or throttling vulnerability in Apache Thrift Erlang bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

MonitorujOpis źródłowy · EN

CVSS: 8,2
EPSS: 0,34 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-96292

Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

MonitorujOpis źródłowy · EN

CVSS: 8,2
EPSS: 0,28 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-96294

Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift NodeJS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,28 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94636

Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before…

MonitorujOpis źródłowy · EN

CVSS: 8,2
EPSS: 0,28 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94637

Improper handling of highly compressed data (data amplification) vulnerability in Apache Thrift Go bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

MonitorujOpis źródłowy · EN

CVSS: 8,2
EPSS: 0,28 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94646

Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift nodejs bindings. This issue affects Apache Thrift: before…

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,3 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94648

Allocation of resources without limits or throttling vulnerability in Apache Thrift dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

MonitorujOpis źródłowy · EN

CVSS: 8,2
EPSS: 0,28 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-86537

Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparound) vulnerability in Apache Thrift D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to…

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,36 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-87117

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,28 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-90440

Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade…

MonitorujOpis źródłowy · EN

CVSS: 8,2
EPSS: 0,28 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-82458

Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. This issue affects Apache Thrift: before…

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,34 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-82459

Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

MonitorujOpis źródłowy · EN

CVSS: 8,2
EPSS: 0,34 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-86535

Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift NodeJS bindings with TJSONProtocol. This issue affects Apache Thrift: before…

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,36 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-104471

YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote files into the web-accessible files/ directory via Bazar CSV import preview. Attackers can import a CSV whose file or image field…

MonitorujOpis źródłowy · EN

CVSS: 8,6
EPSS: 0,37 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-104472

YesWiki before 4.6.7 contains a missing authorization vulnerability in the attachment download handler that allows unauthenticated attackers to bypass page read ACLs. Attackers can request the download handler with a known page tag and file parameter to…

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,35 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-61373

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,43 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-104469

YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attackers who set or learn a victim's pre-authentication YesWiki-* session cookie can…

MonitorujOpis źródłowy · EN

CVSS: 7,6
EPSS: 0,29 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-104460

YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the {{newtextsearch}} action because Bazar list option ids are concatenated into SQL REGEXP/LIKE clauses in actions/newtextsearch.php without escaping. Anonymous attackers can plant a…

MonitorujOpis źródłowy · EN

CVSS: 8,7
EPSS: 0,39 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-104462

YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unescaped tags attribute into a raw SQL IN clause. Attackers with page-write access (unauthenticated on default installs) can embed a nuagetag…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,31 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-104463

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger server requests by sending signed Follow activities to the public forms actor inbox route. Attackers sign requests with their own keyId…

MonitorujOpis źródłowy · EN

CVSS: 8,3
EPSS: 0,25 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-104464

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make server-side GET requests by supplying an unvalidated actor URL to the Bazar abonnements sync action. Attackers can target internal hosts…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,29 %
Publikacja: 2 paź 2026
Poprawka: Status poprawki nieustalony

Podatności: CVE, produkt, opis, sygnały zagrożenia, CVSS, EPSS i data publikacji.
CVE / produkt	Sygnały	Oceny	Publikacja
CVE-2026-66055 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings. This issue affects Apache Thrift: before…	Monitoruj	CVSS 8,2EPSS 0,28 %	2 paź 2026
CVE-2026-104733 User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attacker to impersonate arbitrary users via unvalidated authzid parameter in SASL-PLAIN mechanism.	Monitoruj	CVSS 7,4EPSS 0,22 %	2 paź 2026
CVE-2026-104611 A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast_setting_internet_set of the component POST Request Handler. Performing a…	Monitoruj	CVSS 8,5EPSS 0,49 %	2 paź 2026
CVE-2026-94653 Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0,…	Monitoruj	CVSS 8,2EPSS 0,28 %	2 paź 2026
CVE-2026-96288 Uncontrolled Recursion, Allocation of resources without limits or throttling vulnerability in Apache Thrift Erlang bindings. This issue affects Apache Thrift: before 0.25.0. Users…	Monitoruj	CVSS 8,2EPSS 0,34 %	2 paź 2026
CVE-2026-96292 Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are…	Monitoruj	CVSS 8,2EPSS 0,28 %	2 paź 2026
CVE-2026-96294 Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift NodeJS bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended…	Monitoruj	CVSS 8,7EPSS 0,28 %	2 paź 2026
CVE-2026-94636 Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in…	Monitoruj	CVSS 8,2EPSS 0,28 %	2 paź 2026
CVE-2026-94637 Improper handling of highly compressed data (data amplification) vulnerability in Apache Thrift Go bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to…	Monitoruj	CVSS 8,2EPSS 0,28 %	2 paź 2026
CVE-2026-94646 Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache…	Monitoruj	CVSS 8,7EPSS 0,3 %	2 paź 2026
CVE-2026-94648 Allocation of resources without limits or throttling vulnerability in Apache Thrift dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade…	Monitoruj	CVSS 8,2EPSS 0,28 %	2 paź 2026
CVE-2026-86537 Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparound) vulnerability in Apache Thrift D language bindings. This issue affects…	Monitoruj	CVSS 8,7EPSS 0,36 %	2 paź 2026
CVE-2026-87117 NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes…	Monitoruj	CVSS 8,7EPSS 0,28 %	2 paź 2026
CVE-2026-90440 Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer. This issue…	Monitoruj	CVSS 8,2EPSS 0,28 %	2 paź 2026
CVE-2026-82458 Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin…	Monitoruj	CVSS 8,7EPSS 0,34 %	2 paź 2026
CVE-2026-82459 Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are…	Monitoruj	CVSS 8,2EPSS 0,34 %	2 paź 2026
CVE-2026-86535 Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift NodeJS…	Monitoruj	CVSS 8,7EPSS 0,36 %	2 paź 2026
CVE-2026-104471 YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote files into the web-accessible files/ directory via Bazar CSV import…	Monitoruj	CVSS 8,6EPSS 0,37 %	2 paź 2026
CVE-2026-104472 YesWiki before 4.6.7 contains a missing authorization vulnerability in the attachment download handler that allows unauthenticated attackers to bypass page read ACLs. Attackers can request…	Monitoruj	CVSS 8,7EPSS 0,35 %	2 paź 2026
CVE-2026-61373 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are…	Monitoruj	CVSS 8,7EPSS 0,43 %	2 paź 2026
CVE-2026-104469 YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attackers who…	Monitoruj	CVSS 7,6EPSS 0,29 %	2 paź 2026
CVE-2026-104460 YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the {{newtextsearch}} action because Bazar list option ids are concatenated into SQL REGEXP/LIKE clauses in…	Monitoruj	CVSS 8,7EPSS 0,39 %	2 paź 2026
CVE-2026-104462 YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unescaped tags attribute into a raw SQL IN clause. Attackers with…	Monitoruj	CVSS 8,8EPSS 0,31 %	2 paź 2026
CVE-2026-104463 YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger server requests by sending signed Follow activities to the public…	Monitoruj	CVSS 8,3EPSS 0,25 %	2 paź 2026
CVE-2026-104464 YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make server-side GET requests by supplying an unvalidated actor URL to…	Monitoruj	CVSS 8,8EPSS 0,29 %	2 paź 2026

Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 11.11.2026, 19:02 UTC – 11.11.2026, 20:53 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone11.11.2026, 20:58 UTC

NVD · aktualizacjeOpóźnione lub nieustalone7.11.2026, 20:07 UTC

CISA KEVOstatnie przetworzenie zakończone11.11.2026, 22:45 UTC

FIRST EPSSOstatnie przetworzenie zakończone11.11.2026, 20:58 UTCData modelu znajduje się przy rekordzie.