KATALOG PODATNOŚCI

Baza CVE

Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.

Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.

CVE-2026-93536

A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code.

PozostałeOpis źródłowy · EN

CVSS: 5,3
EPSS: 0,17 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-88967

A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure access token (server-side request forgery).

MonitorujOpis źródłowy · EN

CVSS: 7,7
EPSS: 0,29 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-88858

A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression (uncontrolled recursion). A user with permission to provision alert rules can make the outage persist across restarts.

PozostałeOpis źródłowy · EN

CVSS: 6,5
EPSS: 0,34 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-82961

The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argument supplied by a user-mode caller. z_vrfy_gpio_pin_configure(), z_vrfy_gpio_pin_get_config() and z_vrfy_gpio_pin_interrupt_configure() verified only the device object…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,13 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-82962

ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet header in place, by pushing it into the headroom of the packet's first fragment, instead of allocating a separate header fragment. Before this fix the in-place path was…

PozostałeOpis źródłowy · EN

CVSS: 6,5
EPSS: 0,26 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-83525

Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 before 4.3.2 on all platforms allows an authenticated attacker with CLUSTER_ACTION privilege to cause a denial of service (controller…

PozostałeOpis źródłowy · EN

CVSS: 6,5
EPSS: 0,19 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118619

Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,53 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118609

Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices.…

PozostałeOpis źródłowy · EN

CVSS: 6,8
EPSS: 0,3 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118610

Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,34 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118611

Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices.…

PozostałeOpis źródłowy · EN

CVSS: 6,8
EPSS: 0,3 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118613

Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,24 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118614

Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,2 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118615

Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,41 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118616

Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,2 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118617

Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,26 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118618

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,22 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118601

Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit…

PozostałeOpis źródłowy · EN

CVSS: 6,3
EPSS: 0,27 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118602

Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute…

MonitorujOpis źródłowy · EN

CVSS: 7,8
EPSS: 0,12 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118603

Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this…

MonitorujOpis źródłowy · EN

CVSS: 8,0
EPSS: 0,24 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118604

Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not…

PozostałeOpis źródłowy · EN

CVSS: 6,8
EPSS: 0,3 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118605

Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker…

MonitorujOpis źródłowy · EN

CVSS: 8,0
EPSS: 0,24 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118606

Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not…

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,34 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118607

Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The…

PozostałeOpis źródłowy · EN

CVSS: 6,8
EPSS: 0,87 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118608

Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Alpine iLX-F511 devices.…

PozostałeOpis źródłowy · EN

CVSS: 3,5
EPSS: 0,15 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-118510

A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the absence of a related record to be compiled with an identifier of the wrong data type. In an application that relies on such a check to…

MonitorujOpis źródłowy · EN

CVSS: 7,7
EPSS: 0,28 %
Publikacja: 28 paź 2026
Poprawka: Status poprawki nieustalony

Podatności: CVE, produkt, opis, sygnały zagrożenia, CVSS, EPSS i data publikacji.
CVE / produkt	Sygnały	Oceny	Publikacja
CVE-2026-93536 A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite() in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by…	Pozostałe	CVSS 5,3EPSS 0,17 %	28 paź 2026
CVE-2026-88967 A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure access token…	Monitoruj	CVSS 7,7EPSS 0,29 %	28 paź 2026
CVE-2026-88858 A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression (uncontrolled recursion). A user with permission to provision alert rules…	Pozostałe	CVSS 6,5EPSS 0,34 %	28 paź 2026
CVE-2026-82961 The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argument supplied by a user-mode caller. z_vrfy_gpio_pin_configure(), z_vrfy_gpio_pin_get_config() and…	Monitoruj	CVSS 7,8EPSS 0,13 %	28 paź 2026
CVE-2026-82962 ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet header in place, by pushing it into the headroom of the packet's first fragment, instead of allocating…	Pozostałe	CVSS 6,5EPSS 0,26 %	28 paź 2026
CVE-2026-83525 Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0 before 4.3.2 on all platforms allows an authenticated attacker…	Pozostałe	CVSS 6,5EPSS 0,19 %	28 paź 2026
CVE-2026-118619 Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of…	Monitoruj	CVSS 8,8EPSS 0,53 %	28 paź 2026
CVE-2026-118609 Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary…	Pozostałe	CVSS 6,8EPSS 0,3 %	28 paź 2026
CVE-2026-118610 Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…	Monitoruj	CVSS 8,8EPSS 0,34 %	28 paź 2026
CVE-2026-118611 Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary…	Pozostałe	CVSS 6,8EPSS 0,3 %	28 paź 2026
CVE-2026-118613 Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations…	Monitoruj	CVSS 7,8EPSS 0,24 %	28 paź 2026
CVE-2026-118614 Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of…	Monitoruj	CVSS 7,8EPSS 0,2 %	28 paź 2026
CVE-2026-118615 Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of…	Monitoruj	CVSS 7,8EPSS 0,41 %	28 paź 2026
CVE-2026-118616 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics.…	Monitoruj	CVSS 7,8EPSS 0,2 %	28 paź 2026
CVE-2026-118617 Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected…	Monitoruj	CVSS 7,8EPSS 0,26 %	28 paź 2026
CVE-2026-118618 Ultralytics parse_model Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics.…	Monitoruj	CVSS 7,8EPSS 0,22 %	28 paź 2026
CVE-2026-118601 Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…	Pozostałe	CVSS 6,3EPSS 0,27 %	28 paź 2026
CVE-2026-118602 Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of…	Monitoruj	CVSS 7,8EPSS 0,12 %	28 paź 2026
CVE-2026-118603 Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…	Monitoruj	CVSS 8,0EPSS 0,24 %	28 paź 2026
CVE-2026-118604 Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on…	Pozostałe	CVSS 6,8EPSS 0,3 %	28 paź 2026
CVE-2026-118605 Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary…	Monitoruj	CVSS 8,0EPSS 0,24 %	28 paź 2026
CVE-2026-118606 Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…	Monitoruj	CVSS 8,8EPSS 0,34 %	28 paź 2026
CVE-2026-118607 Alpine iLX-F511 diagapp Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511…	Pozostałe	CVSS 6,8EPSS 0,87 %	28 paź 2026
CVE-2026-118608 Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose…	Pozostałe	CVSS 3,5EPSS 0,15 %	28 paź 2026
CVE-2026-118510 A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the absence of a related record to be compiled with an identifier of the…	Monitoruj	CVSS 7,7EPSS 0,28 %	28 paź 2026

Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 11.11.2026, 00:02 UTC – 11.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone11.11.2026, 04:07 UTC

NVD · aktualizacjeOpóźnione lub nieustalone7.11.2026, 20:07 UTC

CISA KEVOstatnie przetworzenie zakończone11.11.2026, 04:15 UTC

FIRST EPSSOstatnie przetworzenie zakończone11.11.2026, 04:07 UTCData modelu znajduje się przy rekordzie.