p.podatnosc.pl
ZakresWszystkie technologie
WszystkieObserwowaneUstaw technologie

KATALOG PODATNOŚCI

Baza CVE

Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.

Więcej filtrów · producent, sygnały, CVSS

Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.

Wyświetlono 4726–4750 z 101 747 dopasowań.

CVE-2026-111583

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary…

MonitorujOpis źródłowy · EN
CVSS
7,3
EPSS
0,19 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-111584

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges by replacing the…

MonitorujOpis źródłowy · EN
CVSS
7,3
EPSS
0,11 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-111585

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform,…

MonitorujOpis źródłowy · EN
CVSS
8,8
EPSS
0,29 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112709

A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially execute arbitrary…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,2
EPSS
0,42 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-103593

A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log server to execute arbitrary code with root privileges by presenting a specially…

MonitorujOpis źródłowy · EN
CVSS
7,1
EPSS
0,1 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-103594

A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Service condition and…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,5
EPSS
0,43 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-104189

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's public file endpoint performed no share authorization. Anyone who knows a share token…

MonitorujOpis źródłowy · EN
CVSS
7,5
EPSS
0,35 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-104381

A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by sending crafted…

PozostałeOpis źródłowy · EN
CVSS
6,0
EPSS
0,13 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-78845

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root description parsing.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,78 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-117505

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely.…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,31 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-117506

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file extras/push-notification-config-store-database-jpa/src/main/java/org/a2aproject/sdk/extras/pushnotificat…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,31 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-117507

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race condition. The attack may be initiated remotely. Upgrading to version 1.3.0.Final will…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,34 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-117604

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profiler data via a loopback REMOTE_ADDR fallback. Behind a same-host reverse proxy,…

MonitorujOpis źródłowy · EN
CVSS
8,7
EPSS
0,31 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-105987

KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a stickynote annotation. When any user opens the document, the viewer…

PozostałeCERT.plOpis źródłowy · EN
CVSS
5,1
EPSS
0,24 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-94346

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path…

MonitorujOpis źródłowy · EN
CVSS
7,2
EPSS
0,53 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-94347

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a…

MonitorujOpis źródłowy · EN
CVSS
7,2
EPSS
0,3 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-90725

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based…

PozostałeOpis źródłowy · EN
CVSS
4,9
EPSS
0,26 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-90726

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal…

PozostałeOpis źródłowy · EN
CVSS
6,0
EPSS
0,12 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-90727

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Relative Path…

PozostałeOpis źródłowy · EN
CVSS
3,8
EPSS
0,26 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-68866

PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Relative Path…

PozostałeOpis źródłowy · EN
CVSS
6,5
EPSS
0,22 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-118023

Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

MonitorujOpis źródłowy · EN
CVSS
8,8
EPSS
0,14 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-118024

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

MonitorujOpis źródłowy · EN
CVSS
8,8
EPSS
0,14 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-118025

Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

MonitorujOpis źródłowy · EN
CVSS
8,8
EPSS
0,14 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-118026

Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

MonitorujOpis źródłowy · EN
CVSS
8,8
EPSS
0,14 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-118027

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.

Wysoki priorytetOpis źródłowy · EN
CVSS
9,1
EPSS
0,13 %
Publikacja
Poprawka
Status poprawki nieustalony
Podatności: CVE, produkt, opis, sygnały zagrożenia, CVSS, EPSS i data publikacji.
CVE / produktSygnałyOcenyPublikacjaZapisz
CVE-2026-111583

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management…
Monitoruj
 CVSS 7,3EPSS 0,19 %
CVE-2026-111584

A race condition in the installation process of TeamViewer Remote Management - Patch Management for Windows prior to version 26.9.1 allows a local authenticated attacker with low…
Monitoruj
 CVSS 7,3EPSS 0,11 %
CVE-2026-111585

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious…
Monitoruj
 CVSS 8,8EPSS 0,29 %
CVE-2026-112709

A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to…
Wysoki priorytet
 CVSS 9,2EPSS 0,42 %
CVE-2026-103593

A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log server to…
Monitoruj
 CVSS 7,1EPSS 0,1 %
CVE-2026-103594

A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox…
Wysoki priorytet
 CVSS 9,5EPSS 0,43 %
CVE-2026-104189

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's public file…
Monitoruj
 CVSS 7,5EPSS 0,35 %
CVE-2026-104381

A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network…
Pozostałe
 CVSS 6,0EPSS 0,13 %
CVE-2026-78845

Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP…
Wysoki priorytet
 CVSS 9,8EPSS 0,78 %
CVE-2026-117505

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation…
Pozostałe
 CVSS 5,3EPSS 0,31 %
CVE-2026-117506

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file…
Pozostałe
 CVSS 5,3EPSS 0,31 %
CVE-2026-117507

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race condition. The…
Pozostałe
 CVSS 5,3EPSS 0,34 %
CVE-2026-117604

Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profiler data via…
Monitoruj
 CVSS 8,7EPSS 0,31 %
CVE-2026-105987

KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a…
PozostałeCERT.pl
 CVSS 5,1EPSS 0,24 %
CVE-2026-94346

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through…
Monitoruj
 CVSS 7,2EPSS 0,53 %
CVE-2026-94347

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through…
Monitoruj
 CVSS 7,2EPSS 0,3 %
CVE-2026-90725

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Pozostałe
 CVSS 4,9EPSS 0,26 %
CVE-2026-90726

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Pozostałe
 CVSS 6,0EPSS 0,12 %
CVE-2026-90727

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Pozostałe
 CVSS 3,8EPSS 0,26 %
CVE-2026-68866

PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026…
Pozostałe
 CVSS 6,5EPSS 0,22 %
CVE-2026-118023

Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
Monitoruj
 CVSS 8,8EPSS 0,14 %
CVE-2026-118024

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
Monitoruj
 CVSS 8,8EPSS 0,14 %
CVE-2026-118025

Other issue in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
Monitoruj
 CVSS 8,8EPSS 0,14 %
CVE-2026-118026

Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
Monitoruj
 CVSS 8,8EPSS 0,14 %
CVE-2026-118027

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
Wysoki priorytet
 CVSS 9,1EPSS 0,13 %
Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 6.11.2026, 15:02 UTC – 6.11.2026, 20:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.

Więcej możliwości