Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Eurobank WooCommerce Payment Gateway | CVE-2026-103300 The Eurobank WooCommerce Payment Gateway WordPress plugin through 2.1.1 does not verify that a payment-confirmation request genuinely originates from the payment provider, and ships with the secret that would authenticate it empty by default, allowing unauthenticated attackers to mark any pending… |
5,3 | 0,11 % | Brak wpisu w KEV nie wyklucza ataków | |
| NocoDB | CVE-2026-116121 A vulnerability was identified in NocoDB up to 2026.08.0. This issue affects some unknown processing of the file users.service.ts of the component Registration. Such manipulation leads to race condition. The attack may be performed from remote. The attack requires a high level of complexity. The… |
6,3 | 0,23 % | Brak wpisu w KEV nie wyklucza ataków | |
| NocoDB | CVE-2026-116122 A security flaw has been discovered in NocoDB up to 2026.07.0. Impacted is the function AuthService.validateUser of the component Sign-in Endpoint. Performing a manipulation of the argument salt results in information disclosure. It is possible to initiate the attack remotely. The attack's… |
6,3 | 0,44 % | Brak wpisu w KEV nie wyklucza ataków | |
| NocoDB | CVE-2026-116123 A weakness has been identified in NocoDB up to 2026.07.0. The affected element is the function validatePassword of the file /auth/user/signup. Executing a manipulation can lead to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. This attack… |
6,3 | 0,51 % | Brak wpisu w KEV nie wyklucza ataków | |
| NocoDB | CVE-2026-116120 A vulnerability was determined in NocoDB up to 2026.07.0. This vulnerability affects the function UserRefreshToken.deleteAllUserToken of the file /auth/user/signup of the component PublicApiLimiterGuard. This manipulation causes allocation of resources. The attack is possible to be carried out… |
6,3 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| Electronic delivery item Inspection Support System | CVE-2026-113345 Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution. |
8,5 | 0,12 % | Brak wpisu w KEV nie wyklucza ataków | |
| halo | CVE-2026-116117 A flaw has been found in halo-dev halo up to 2.27.0-beta.1. Affected by this vulnerability is the function run.halo.app.theme.DefaultViewNameResolver.resolveViewNameOrDefault of the file application/src/main/java/run/halo/app/theme/DefaultViewNameResolver.java of the component View Name Resolver.… |
5,5 | 0,5 % | Brak wpisu w KEV nie wyklucza ataków | |
| Zcode | CVE-2026-116118 A vulnerability has been found in Z.ai Zcode up to 3.14.3/3.15.1. Affected by this issue is some unknown functionality of the component Sed Command Filter. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public… |
2,1 | 1,05 % | Brak wpisu w KEV nie wyklucza ataków | |
| NocoDB | CVE-2026-116119 A vulnerability was found in NocoDB up to 2026.08.0. This affects an unknown part of the file packages/nocodb/src/services/users/users.service.ts of the component Password-Reset Flow. The manipulation results in race condition. The attack can be executed remotely. The vendor deleted the GitHub… |
5,1 | 0,14 % | Brak wpisu w KEV nie wyklucza ataków | |
| GM8135S Camera | CVE-2026-116116 A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now public and may be… |
8,4 | 0,09 % | Brak wpisu w KEV nie wyklucza ataków | |
| GM8135S Camera | CVE-2026-116114 A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the file /npc/npc of the component Live UDP H.264 Video Stream Handler. This manipulation causes cleartext transmission of sensitive information. The attack can be initiated remotely. The… |
2,9 | 0,19 % | Brak wpisu w KEV nie wyklucza ataków | |
| GM8135S Camera | CVE-2026-116115 A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an unknown function of the file wpa_supplicantX.conf of the component WiFi Configuration. Such manipulation leads to improper initialization. The attack can only be initiated within the local network.… |
1,3 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| GouGuOA | CVE-2026-116113 A security flaw has been discovered in GouGuOA up to 6.1.2. The impacted element is the function chunkUpload of the file app/disk/controller/Api.php. The manipulation of the argument file_extension results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been… |
2,1 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| LiveWallPaper | CVE-2026-116110 A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows. This issue affects some unknown processing of the file /LiveWallpaper/UploadFile of the component SignalR Hub. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely.… |
5,5 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Civilization V | CVE-2026-116111 A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the component Lua Sandbox. Executing a manipulation can lead to type confusion. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The… |
9,6 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| edoc-doctor-appointment-system | CVE-2026-116112 A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to cc258425b915d1af9e298777ccd26d160493e68d. The affected element is an unknown function of the file admin/add-new.php. The manipulation of the argument spec leads to sql injection. It is possible to initiate the… |
5,5 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków | |
| Continue | CVE-2026-116109 A vulnerability has been found in continuedev Continue 2.0.0. This vulnerability affects the function MCPManagerSingleton.setConnections of the file core/config/ConfigHandler.ts of the component MCP Server Transport. Such manipulation leads to os command injection. The attack can be executed… |
2,1 | 1,15 % | Brak wpisu w KEV nie wyklucza ataków | |
| HeyCyan App | CVE-2026-116105 A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched… |
6,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| HeyCyan App | CVE-2026-116106 A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to improper access controls. The attack may be initiated remotely. The vendor was contacted early about… |
6,9 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| Product Sets Plugin | CVE-2026-116107 A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. Affected by this issue is the function dfrps_ajax_delete_saved_search of the file functions/ajax.php of the component AJAX Handlers. The manipulation results in missing authorization. The attack may be… |
2,1 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| OpenBB | CVE-2026-116108 A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.0. This affects an unknown part of the file openbb_platform/core/openbb_core/app/model/api_settings.py of the component Local API Server. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The… |
2,1 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| gougucms | CVE-2026-116100 A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the component User Level Handler. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The… |
1,9 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| Online Cake Ordering System | CVE-2026-116101 A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could… |
2,1 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| docker-mcp | CVE-2026-116102 A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.0. The impacted element is the function _build_windows_command of the file docker_executor.py. This manipulation of the argument project_name causes os command injection. It is possible to initiate the attack remotely. |
5,3 | 0,91 % | Brak wpisu w KEV nie wyklucza ataków | |
| Neural Network Libraries | CVE-2026-116103 A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load_param_in_txt of the file python/src/nnabla/utils/cli/encode_decode_param.py of the component Encode Param Command Handler. Such manipulation leads to code injection. It is possible to… |
2,1 | 0,23 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 13.11.2026, 23:02 UTC – 14.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.