KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This issue affects MediaWiki WikiLambda extension: 1.46.
restbed through 5.0.0 buffers HTTP request headers without enforcing a maximum size limit, allowing remote unauthenticated attackers to exhaust server memory. Attackers can open TCP connections and stream bytes indefinitely without sending the header…
restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers the payload without size limits in an unbounded stream buffer. Remote unauthenticated attackers can declare large frame sizes and stream payload data to…
yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attackers with manager role can upload PHP scripts to the web-accessible storage directory and request…
Subscriber Cross Site Scripting (XSS) in Branda <= 3.4.32 versions.
Contributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 versions.
Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.4 versions.
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields <= 3.3.8 versions.
Unauthenticated Cross Site Scripting (XSS) in Post and Page Builder by BoldGrid <= 1.27.14 versions.
Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, the workspace HTTP service that listens on 0.0.0.0:8080 inside each sm-ws-* Fly Machine exposes endpoints (/health, /file/<path>,…
CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to version 13.10.0, every route in the ESRI helper family (api/routes/esri.ts) takes a fully attacker-controlled URL from the request (POST…
Błąd w SSLContext w Pythonie pozwala na pominięcie weryfikacji hosta certyfikatu.
NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful…
NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DMA mapping. A successful exploit of this vulnerability might…
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerability might lead to code execution,…
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unprivileged local user could cause improper preservation of memory access permissions when importing a read-only buffer…
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful exploit of this vulnerability might lead to denial of service and…
Luka w sterowniku NVIDIA dla Linuksa pozwala na obejście ochrony pamięci i eskalację uprawnień.
Luka w sterowniku NVIDIA GPU umożliwia nieautoryzowane odczyty i potencjalne wykonanie kodu.
Wykorzystanie luki w sterowniku NVIDIA GPU pozwala na zdalne wykonanie kodu i eskalację uprawnień.
Wykorzystanie błędu use-after-free w sterowniku NVIDIA GPU może prowadzić do wykonania kodu.
Luka w sterowniku NVIDIA GPU dla Linuksa pozwala nieuprzywilejowanemu użytkownikowi na zapis do pamięci tylko do odczytu.
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved. A successful exploit of this vulnerability might lead to code…
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivileged local user could cause a use-after-free through a missing self-reference guard in the map cleanup path. A…
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-103446 Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This issue affects MediaWiki… |
Monitoruj |
CVSS 7,4EPSS 0,33 % | ||
| CVE-2026-103471 restbed through 5.0.0 buffers HTTP request headers without enforcing a maximum size limit, allowing remote unauthenticated attackers to exhaust server memory. Attackers can open TCP… |
Monitoruj |
CVSS 8,7EPSS 0,55 % | ||
| CVE-2026-103472 restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers the payload without size limits in an unbounded stream buffer. Remote… |
Monitoruj |
CVSS 8,7EPSS 0,44 % | ||
| CVE-2026-103474 yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attackers with manager role can… |
Monitoruj |
CVSS 8,8EPSS 0,39 % | ||
| CVE-2026-102376 Subscriber Cross Site Scripting (XSS) in Branda <= 3.4.32 versions. |
Monitoruj |
CVSS 7,1EPSS 0,19 % | ||
| CVE-2026-102377 Contributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 versions. |
Monitoruj |
CVSS 8,8EPSS 0,28 % | ||
| CVE-2026-102391 Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.4 versions. |
Monitoruj |
CVSS 7,1EPSS 0,14 % | ||
| CVE-2026-102392 Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields <= 3.3.8 versions. |
Monitoruj |
CVSS 7,2EPSS 0,29 % | ||
| CVE-2026-100510 Unauthenticated Cross Site Scripting (XSS) in Post and Page Builder by BoldGrid <= 1.27.14 versions. |
Monitoruj |
CVSS 7,1EPSS 0,14 % | ||
| CVE-2026-46711 Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, the workspace HTTP service that listens on 0.0.0.0:8080 inside each… |
Monitoruj |
CVSS 8,3EPSS 0,27 % | ||
| CVE-2026-55177 CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to version 13.10.0, every route in the ESRI helper family… |
Monitoruj |
CVSS 7,6EPSS 0,38 % | ||
| CVE-2026-19553 Błąd w SSLContext w Pythonie pozwala na pominięcie weryfikacji hosta certyfikatu. |
Monitoruj |
CVSS 7,6EPSS 0,55 % | ||
| CVE-2026-103241 Błąd w vLLM umożliwia zdalne wywołanie odmowy usługi. |
Monitoruj |
CVSS 7,5EPSS 0,71 % | ||
| CVE-2026-47598 NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a… |
Monitoruj |
CVSS 7,0EPSS 0,11 % | ||
| CVE-2026-47599 NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access… |
Monitoruj |
CVSS 7,8EPSS 0,11 % | ||
| CVE-2026-47600 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A… |
Monitoruj |
CVSS 7,8EPSS 0,13 % | ||
| CVE-2026-47601 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module DMA-BUF import path where an unprivileged local user could cause improper… |
Monitoruj |
CVSS 7,8EPSS 0,12 % | ||
| CVE-2026-47602 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful… |
Monitoruj |
CVSS 7,1EPSS 0,11 % | ||
| CVE-2026-47591 Luka w sterowniku NVIDIA dla Linuksa pozwala na obejście ochrony pamięci i eskalację uprawnień. |
Monitoruj |
CVSS 7,8EPSS 0,12 % | ||
| CVE-2026-47592 Luka w sterowniku NVIDIA GPU umożliwia nieautoryzowane odczyty i potencjalne wykonanie kodu. |
Monitoruj |
CVSS 7,8EPSS 0,13 % | ||
| CVE-2026-47593 Wykorzystanie luki w sterowniku NVIDIA GPU pozwala na zdalne wykonanie kodu i eskalację uprawnień. |
Monitoruj |
CVSS 7,8EPSS 0,13 % | ||
| CVE-2026-47594 Wykorzystanie błędu use-after-free w sterowniku NVIDIA GPU może prowadzić do wykonania kodu. |
Monitoruj |
CVSS 7,8EPSS 0,12 % | ||
| CVE-2026-47595 Luka w sterowniku NVIDIA GPU dla Linuksa pozwala nieuprzywilejowanemu użytkownikowi na zapis do pamięci tylko do odczytu. |
Monitoruj |
CVSS 7,8EPSS 0,12 % | ||
| CVE-2026-47596 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not… |
Monitoruj |
CVSS 7,0EPSS 0,14 % | ||
| CVE-2026-47597 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the open-source kernel module Resource Server where an unprivileged local user could cause a use-after-free… |
Monitoruj |
CVSS 7,8EPSS 0,12 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 12.11.2026, 11:02 UTC – 12.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.