KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker may be able to cause unexpected system termination or corrupt kernel memory.
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination or write kernel memory.
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to unexpected system termination.
A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, Pheditor ships with a hardcoded default password admin (SHA-512 hash stored at pheditor.php:11). There is no mechanism to force a password change on…
Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.4, an OS Command Injection vulnerability in the terminal action handler allows any authenticated user to execute arbitrary OS commands by injecting…
Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call. When the rewrite base is a plain string, the REQUEST_URI is appended to it, with no check that the path starts with a…
Wtyczka bazaar w SiYuan desktop umożliwia zdalne wykonanie kodu przez XSS.
Luka w SiYuan umożliwia atak XSS przez niewłaściwe renderowanie obrazów w dokumentach.
phpMyFAQ before v4.1.6 contains a remote code execution vulnerability in the configuration API that allows authenticated administrators with CONFIGURATION_EDIT and ATTACHMENT_ADD privileges to write arbitrary PHP files by manipulating the…
SiYuan before v3.7.3 contains stored and reflected cross-site scripting vulnerabilities in SVG sanitization that allows authenticated attackers to execute scripts by bypassing the HTML parser-based cleaner. Attackers can hide script tags within desc, style,…
Wstrzyknięcie SQL w EasyAppointments umożliwia zdalne wykonanie kodu przez nieprawidłowe dane wejściowe.
Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.
Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.
Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions.
Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to forge the mail from address of forms.
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of order parameters in the Dynamic Content endpoint leads to an SQL injection vector.
Wstrzyknięcie SQL w SP Page Builder umożliwia nieautoryzowany dostęp do bazy danych.
Wstrzyknięcie kodu w vBulletin umożliwia zdalne wykonanie dowolnego kodu PHP przez nieautoryzowanych użytkowników.
Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-43710 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An attacker may be able to cause unexpected… |
Wysoki priorytet |
CVSS 9,8EPSS 0,59 % | ||
| CVE-2026-43682 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected… |
Wysoki priorytet |
CVSS 9,8EPSS 0,72 % | ||
| CVE-2026-43694 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system… |
Wysoki priorytet |
CVSS 9,8EPSS 0,59 % | ||
| CVE-2026-39873 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to… |
Wysoki priorytet |
CVSS 9,8EPSS 0,59 % | ||
| CVE-2026-28982 A race condition was addressed with improved locking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected… |
Wysoki priorytet |
CVSS 9,8EPSS 0,56 % | ||
| CVE-2026-28911 The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process. |
Wysoki priorytet |
CVSS 9,8EPSS 0,5 % | ||
| CVE-2026-28928 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to… |
Wysoki priorytet |
CVSS 9,8EPSS 0,59 % | ||
| CVE-2026-55579 Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, Pheditor ships with a hardcoded default password admin (SHA-512 hash stored at… |
Wysoki priorytet |
CVSS 9,8EPSS 0,79 % | ||
| CVE-2026-48030 Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.4, an OS Command Injection vulnerability in the terminal action handler allows… |
Wysoki priorytet |
CVSS 9,9EPSS 7,55 % | ||
| CVE-2026-17552 Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call. When the rewrite base is a plain string, the… |
Wysoki priorytet |
CVSS 9,1EPSS 0,54 % | ||
| CVE-2026-66395 Wtyczka bazaar w SiYuan desktop umożliwia zdalne wykonanie kodu przez XSS. |
Wysoki priorytet |
CVSS 9,4EPSS 0,57 % | ||
| CVE-2026-66396 Luka w SiYuan umożliwia atak XSS przez niewłaściwe renderowanie obrazów w dokumentach. |
Wysoki priorytet |
CVSS 9,3EPSS 0,54 % | ||
| CVE-2026-66398 phpMyFAQ before v4.1.6 contains a remote code execution vulnerability in the configuration API that allows authenticated administrators with CONFIGURATION_EDIT and ATTACHMENT_ADD… |
Wysoki priorytet |
CVSS 9,4EPSS 0,41 % | ||
| CVE-2026-66394 SiYuan before v3.7.3 contains stored and reflected cross-site scripting vulnerabilities in SVG sanitization that allows authenticated attackers to execute scripts by bypassing the HTML… |
Wysoki priorytet |
CVSS 9,3EPSS 0,34 % | ||
| CVE-2025-50455 Wstrzyknięcie SQL w EasyAppointments umożliwia zdalne wykonanie kodu przez nieprawidłowe dane wejściowe. |
Wysoki priorytet |
CVSS 9,1EPSS 1,11 % | ||
| CVE-2026-59550 Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions. |
Wysoki priorytet |
CVSS 9,3EPSS 0,4 % | ||
| CVE-2026-59538 Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions. |
Wysoki priorytet |
CVSS 9,3EPSS 0,4 % | ||
| CVE-2026-59549 Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. |
Wysoki priorytet |
CVSS 9,3EPSS 0,4 % | ||
| CVE-2026-59527 Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. |
Wysoki priorytet |
CVSS 9,3EPSS 0,4 % | ||
| CVE-2026-59533 Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions. |
Wysoki priorytet |
CVSS 9,3EPSS 0,4 % | ||
| CVE-2026-65879 Joomla Extension - joomshaper.com - Unauthenticated mail relay via a hardcoded, product-wide secret in SP Page Builder < 6.7.1 - A hardcoded secret allowed attackers to forge the mail from… |
Wysoki priorytet |
CVSS 9,8EPSS 0,51 % | ||
| CVE-2026-65766 Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of order parameters in the Dynamic Content endpoint leads to an SQL… |
Wysoki priorytet |
CVSS 9,2EPSS 0,4 % | ||
| CVE-2026-65876 Wstrzyknięcie SQL w SP Page Builder umożliwia nieautoryzowany dostęp do bazy danych. |
Wysoki priorytet |
CVSS 9,2EPSS 0,39 % | ||
| CVE-2026-61511 Wstrzyknięcie kodu w vBulletin umożliwia zdalne wykonanie dowolnego kodu PHP przez nieautoryzowanych użytkowników. |
Wysoki priorytet |
CVSS 9,3EPSS 5,61 % | ||
| CVE-2026-55971 Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes… |
Wysoki priorytet |
CVSS 9,8EPSS 0,98 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 6.11.2026, 07:02 UTC – 6.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.