KATALOG PODATNOŚCI

Baza CVE

Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.

Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.

CVE-2026-82961

The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argument supplied by a user-mode caller. z_vrfy_gpio_pin_configure(), z_vrfy_gpio_pin_get_config() and z_vrfy_gpio_pin_interrupt_configure() verified only the device object…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,13 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-82962

ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet header in place, by pushing it into the headroom of the packet's first fragment, instead of allocating a separate header fragment. Before this fix the in-place path was…

PozostałeOpis źródłowy · EN

CVSS: 6,5
EPSS: 0,26 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-83525

Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 before 4.3.2 on all platforms allows an authenticated attacker with CLUSTER_ACTION privilege to cause a denial of service (controller…

PozostałeOpis źródłowy · EN

CVSS: 6,5
EPSS: 0,19 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118619

Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,53 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118609

Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices.…

PozostałeOpis źródłowy · EN

CVSS: 6,8
EPSS: 0,3 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118610

Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,34 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118611

Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices.…

PozostałeOpis źródłowy · EN

CVSS: 6,8
EPSS: 0,3 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118613

Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,24 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118614

Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,2 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118615

Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,41 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118616

Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,2 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118617

Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,26 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118618

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,22 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118601

Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit…

PozostałeOpis źródłowy · EN

CVSS: 6,3
EPSS: 0,27 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118602

Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,12 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118603

Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this…

MonitorujOpis źródłowy · EN

CVSS: 8,0
EPSS: 0,24 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118604

Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not…

PozostałeOpis źródłowy · EN

CVSS: 6,8
EPSS: 0,3 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118605

Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker…

MonitorujOpis źródłowy · EN

CVSS: 8,0
EPSS: 0,24 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118606

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,34 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118607

Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The…

PozostałeOpis źródłowy · EN

CVSS: 6,8
EPSS: 0,87 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118608

Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Alpine iLX-F511 devices.…

PozostałeOpis źródłowy · EN

CVSS: 3,5
EPSS: 0,15 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118510

A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the absence of a related record to be compiled with an identifier of the wrong data type. In an application that relies on such a check to…

MonitorujOpis źródłowy · EN

CVSS: 7,7
EPSS: 0,28 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118581

A BSON encoding component of the MongoDB Java Driver does not verify that an externally supplied raw document's self-declared length agrees with the extent of the byte range it is given before that range is copied into an outgoing database command. An…

PozostałeOpis źródłowy · EN

CVSS: 6,9
EPSS: 0,19 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

Development

CVE-2026-117617

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing it, and allows symbolic links in artifacts to replace existing files or…

MonitorujOpis źródłowy · EN

CVSS: 8,1
EPSS: 0,48 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

Development

CVE-2026-117618

In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check whether the setup wizard has been completed, resulting in a race condition that allows unauthenticated attackers to create an…

MonitorujOpis źródłowy · EN

CVSS: 8,1
EPSS: 0,26 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

Podatności: CVE, produkt, opis, sygnały zagrożenia, CVSS, EPSS i data publikacji.
CVE / produkt	Sygnały	Oceny	Publikacja
CVE-2026-82961 The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argument supplied by a user-mode caller. z_vrfy_gpio_pin_configure(), z_vrfy_gpio_pin_get_config() and…	Monitoruj	CVSS 7,8EPSS 0,13 %	28 paź 2026
CVE-2026-82962 ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet header in place, by pushing it into the headroom of the packet's first fragment, instead of allocating…	Pozostałe	CVSS 6,5EPSS 0,26 %	28 paź 2026
CVE-2026-83525 Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 before 4.3.2 on all platforms allows an authenticated attacker…	Pozostałe	CVSS 6,5EPSS 0,19 %	28 paź 2026
CVE-2026-118619 Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of…	Monitoruj	CVSS 8,8EPSS 0,53 %	28 paź 2026
CVE-2026-118609 Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary…	Pozostałe	CVSS 6,8EPSS 0,3 %	28 paź 2026
CVE-2026-118610 Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…	Monitoruj	CVSS 8,8EPSS 0,34 %	28 paź 2026
CVE-2026-118611 Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary…	Pozostałe	CVSS 6,8EPSS 0,3 %	28 paź 2026
CVE-2026-118613 Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations…	Monitoruj	CVSS 7,8EPSS 0,24 %	28 paź 2026
CVE-2026-118614 Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of…	Monitoruj	CVSS 7,8EPSS 0,2 %	28 paź 2026
CVE-2026-118615 Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of…	Monitoruj	CVSS 7,8EPSS 0,41 %	28 paź 2026
CVE-2026-118616 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics.…	Monitoruj	CVSS 7,8EPSS 0,2 %	28 paź 2026
CVE-2026-118617 Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected…	Monitoruj	CVSS 7,8EPSS 0,26 %	28 paź 2026
CVE-2026-118618 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics.…	Monitoruj	CVSS 7,8EPSS 0,22 %	28 paź 2026
CVE-2026-118601 Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…	Pozostałe	CVSS 6,3EPSS 0,27 %	28 paź 2026
CVE-2026-118602 Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of…	Monitoruj	CVSS 7,8EPSS 0,12 %	28 paź 2026
CVE-2026-118603 Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…	Monitoruj	CVSS 8,0EPSS 0,24 %	28 paź 2026
CVE-2026-118604 Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on…	Pozostałe	CVSS 6,8EPSS 0,3 %	28 paź 2026
CVE-2026-118605 Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary…	Monitoruj	CVSS 8,0EPSS 0,24 %	28 paź 2026
CVE-2026-118606 Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…	Monitoruj	CVSS 8,8EPSS 0,34 %	28 paź 2026
CVE-2026-118607 Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511…	Pozostałe	CVSS 6,8EPSS 0,87 %	28 paź 2026
CVE-2026-118608 Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose…	Pozostałe	CVSS 3,5EPSS 0,15 %	28 paź 2026
CVE-2026-118510 A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the absence of a related record to be compiled with an identifier of the…	Monitoruj	CVSS 7,7EPSS 0,28 %	28 paź 2026
CVE-2026-118581 A BSON encoding component of the MongoDB Java Driver does not verify that an externally supplied raw document's self-declared length agrees with the extent of the byte range it is given…	Pozostałe	CVSS 6,9EPSS 0,19 %	28 paź 2026
Development CVE-2026-117617 Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing…	Monitoruj	CVSS 8,1EPSS 0,48 %	28 paź 2026
Development CVE-2026-117618 In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check whether the setup wizard has been completed, resulting in a race…	Monitoruj	CVSS 8,1EPSS 0,26 %	28 paź 2026

Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 10.11.2026, 23:32 UTC – 11.11.2026, 01:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone11.11.2026, 01:07 UTC

NVD · aktualizacjeOpóźnione lub nieustalone7.11.2026, 20:07 UTC

CISA KEVOstatnie przetworzenie zakończone11.11.2026, 03:30 UTC

FIRST EPSSOstatnie przetworzenie zakończone11.11.2026, 01:07 UTCData modelu znajduje się przy rekordzie.