CVE-2026-86574
Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 11-00 before 12-50-54.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,8
- EPSS
- 0,52 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Baza CVE
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
CVE-2026-86575
Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System…
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,4
- EPSS
- 0,45 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-86576
Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System…
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,4
- EPSS
- 0,45 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-86577
Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 -…
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,4
- EPSS
- 0,46 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-76935
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,4
- EPSS
- 0,33 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-76936
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,4
- EPSS
- 0,45 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-76937
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,4
- EPSS
- 0,45 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-76938
Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,8
- EPSS
- 0,64 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-76939
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,8
- EPSS
- 0,52 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-82116
Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00…
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,8
- EPSS
- 0,61 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-82117
Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through…
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,8
- EPSS
- 0,64 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-82118
Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V;…
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,8
- EPSS
- 0,52 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-107145
The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. Due to the lack of rate limiting, an attacker who obtains user's password can submit arbitrary 6-digit codes, resulting in second-factor bypass and…
PozostałeCERT.plOpis źródłowy · EN
- CVSS
- 6,3
- EPSS
- 0,3 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-107146
The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. Due to the lack of server-side session destruction, an attacker can ignore the logout redirect and keep the session alive. This may allow an…
PozostałeOpis źródłowy · EN
- CVSS
- 6,3
- EPSS
- 0,35 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-107147
The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's password can spoof a…
PozostałeCERT.plOpis źródłowy · EN
- CVSS
- 6,3
- EPSS
- 0,39 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117493
Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards/<id>/widgets/<id> API accepts HTML and JavaScript content in the ‘desc’ and ‘text’ parameters. The code entered is executed in the browser when the widget is rendered, which could…
MonitorujOpis źródłowy · EN
- CVSS
- 8,3
- EPSS
- 0,28 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-117494
Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:image/svg+xml;base64. Script tags embedded in the SVG are processed when the content is rendered in the assistant window, allowing…
MonitorujOpis źródłowy · EN
- CVSS
- 8,3
- EPSS
- 0,28 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-76932
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,4
- EPSS
- 0,45 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-76933
Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,4
- EPSS
- 0,45 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-76934
Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,8
- EPSS
- 0,52 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-102788
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the value of the sort-by URL parameter is retrieved using a string filter and passed directly to GridboxHelper::getBlogPosts(). When the…
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,3
- EPSS
- 0,39 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-102789
Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorController::getBlogPosts() reads the order parameter and invokes getBlogPosts() . Unlike other tasks in this controller, it omits the…
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,3
- EPSS
- 0,32 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-102787
Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5
PozostałeOpis źródłowy · EN
- CVSS
- 5,3
- EPSS
- 0,17 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-65213
This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC
PozostałeOpis źródłowy · EN
- CVSS
- 6,6
- EPSS
- 0,54 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-92885
The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qode_membership_check_facebook_user AJAX action. This is due to a typographic error in the…
Wysoki priorytetOpis źródłowy · EN
- CVSS
- 9,8
- EPSS
- 0,37 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-86574 Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 11-00 before 12-50-54. |
Wysoki priorytet |
CVSS 9,8EPSS 0,52 % | ||
| CVE-2026-86575 Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 -… |
Wysoki priorytet |
CVSS 9,4EPSS 0,45 % | ||
| CVE-2026-86576 Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 -… |
Wysoki priorytet |
CVSS 9,4EPSS 0,45 % | ||
| CVE-2026-86577 Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager:… |
Wysoki priorytet |
CVSS 9,4EPSS 0,46 % | ||
| CVE-2026-76935 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. |
Wysoki priorytet |
CVSS 9,4EPSS 0,33 % | ||
| CVE-2026-76936 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. |
Wysoki priorytet |
CVSS 9,4EPSS 0,45 % | ||
| CVE-2026-76937 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. |
Wysoki priorytet |
CVSS 9,4EPSS 0,45 % | ||
| CVE-2026-76938 Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. |
Wysoki priorytet |
CVSS 9,8EPSS 0,64 % | ||
| CVE-2026-76939 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31;… |
Wysoki priorytet |
CVSS 9,8EPSS 0,52 % | ||
| CVE-2026-82116 Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through… |
Wysoki priorytet |
CVSS 9,8EPSS 0,61 % | ||
| CVE-2026-82117 Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22;… |
Wysoki priorytet |
CVSS 9,8EPSS 0,64 % | ||
| CVE-2026-82118 Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB… |
Wysoki priorytet |
CVSS 9,8EPSS 0,52 % | ||
| CVE-2026-107145 The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. Due to the lack of rate limiting, an attacker who obtains user's password can… |
PozostałeCERT.pl |
CVSS 6,3EPSS 0,3 % | ||
| CVE-2026-107146 The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. Due to the lack of server-side session destruction, an attacker can… |
Pozostałe |
CVSS 6,3EPSS 0,35 % | ||
| CVE-2026-107147 The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and… |
PozostałeCERT.pl |
CVSS 6,3EPSS 0,39 % | ||
| CVE-2026-117493 Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards/<id>/widgets/<id> API accepts HTML and JavaScript content in the ‘desc’ and ‘text’ parameters. The code entered is… |
Monitoruj |
CVSS 8,3EPSS 0,28 % | ||
| CVE-2026-117494 Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:image/svg+xml;base64. Script tags embedded in the SVG are processed… |
Monitoruj |
CVSS 8,3EPSS 0,28 % | ||
| CVE-2026-76932 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31;… |
Wysoki priorytet |
CVSS 9,4EPSS 0,45 % | ||
| CVE-2026-76933 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31;… |
Wysoki priorytet |
CVSS 9,4EPSS 0,45 % | ||
| CVE-2026-76934 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31;… |
Wysoki priorytet |
CVSS 9,8EPSS 0,52 % | ||
| CVE-2026-102788 Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the value of the sort-by URL parameter is retrieved using a string… |
Wysoki priorytet |
CVSS 9,3EPSS 0,39 % | ||
| CVE-2026-102789 Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorController::getBlogPosts() reads the order parameter and invokes… |
Wysoki priorytet |
CVSS 9,3EPSS 0,32 % | ||
| CVE-2026-102787 Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5 |
Pozostałe |
CVSS 5,3EPSS 0,17 % | ||
| CVE-2026-65213 This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC |
Pozostałe |
CVSS 6,6EPSS 0,54 % | ||
| CVE-2026-92885 The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the… |
Wysoki priorytet |
CVSS 9,8EPSS 0,37 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 4.11.2026, 19:02 UTC – 4.11.2026, 22:31 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.