KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contact_insert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments…
A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remotedev Server. The manipulation of the argument action results in code injection. The attack is only possible with local…
GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An…
NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsafe rendering of externally supplied OpenAPI plugin schema content. When a plugin schema is loaded from a remote URL, the returned content…
Tanium addressed a compression bomb vulnerability in Enforce.
Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis passes the pull-request-controlled workspace value from atlantis.yaml into Terraform command arguments that…
OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI management. From 1.0.0 until 1.3.2, the GET /api/v1/controller/ca/<integer-id>/crl endpoint allows an authenticated organization manager with CA…
Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates the initial icon host and DNS results but passes favicon URLs parsed from attacker-controlled HTML to get_page_with_referer()…
Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicit_hosting enabled incorrectly authorize legacy WebRTC data-channel input because LegacyIsHost()…
HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request through…
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
Tanium addressed an improper output sanitization vulnerability in Comply.
Tanium addressed an improper output sanitization vulnerability in Enforce.
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Tanium addressed a denial of service vulnerability in Enforce.
Tanium addressed a denial of service vulnerability in Enforce.
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Tanium addressed an improper access controls vulnerability in Enforce.
Tanium addressed an information disclosure vulnerability in Tanium Server.
Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-117516 A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contact_insert.php of the component Contact Form Handler. This… |
Pozostałe |
CVSS 5,5EPSS 0,41 % | ||
| CVE-2026-117526 A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remotedev Server. The manipulation of the argument… |
Pozostałe |
CVSS 1,9EPSS 0,14 % | ||
| CVE-2026-118131 GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory allows members of the… |
Wysoki priorytet |
CVSS 9,8EPSS 0,19 % | ||
| CVE-2026-118132 NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsafe rendering of externally supplied OpenAPI plugin schema content.… |
Pozostałe |
CVSS 6,1EPSS 0,22 % | ||
| CVE-2026-116662 Tanium addressed a compression bomb vulnerability in Enforce. |
Monitoruj |
CVSS 7,5EPSS 0,38 % | ||
| CVE-2026-116676 Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis passes the pull-request-controlled… |
Monitoruj |
CVSS 8,8EPSS 0,47 % | ||
| CVE-2026-116677 OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI management. From 1.0.0 until 1.3.2, the GET… |
Pozostałe |
CVSS 5,3EPSS 0,18 % | ||
| CVE-2026-116678 Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates the initial icon host and DNS results but passes favicon… |
Pozostałe |
CVSS 5,8EPSS 0,33 % | ||
| CVE-2026-116679 Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicit_hosting enabled… |
Pozostałe |
CVSS 5,4EPSS 0,31 % | ||
| CVE-2026-116680 HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and… |
Pozostałe |
CVSS 6,4EPSS 0,19 % | ||
| CVE-2026-108333 Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. |
Pozostałe |
CVSS 2,5EPSS 0,13 % | ||
| CVE-2026-116647 Tanium addressed an improper output sanitization vulnerability in Comply. |
Monitoruj |
CVSS 7,1EPSS 0,24 % | ||
| CVE-2026-116649 Tanium addressed an improper output sanitization vulnerability in Enforce. |
Monitoruj |
CVSS 7,1EPSS 0,2 % | ||
| CVE-2026-116656 Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. |
Monitoruj |
CVSS 7,5EPSS 0,38 % | ||
| CVE-2026-116657 Tanium addressed a denial of service vulnerability in Enforce. |
Pozostałe |
CVSS 5,3EPSS 0,34 % | ||
| CVE-2026-116658 Tanium addressed a denial of service vulnerability in Enforce. |
Pozostałe |
CVSS 6,5EPSS 0,34 % | ||
| CVE-2026-116659 Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. |
Pozostałe |
CVSS 4,3EPSS 0,3 % | ||
| CVE-2026-116660 Tanium addressed an improper access controls vulnerability in Enforce. |
Pozostałe |
CVSS 4,3EPSS 0,23 % | ||
| CVE-2026-108316 Tanium addressed an information disclosure vulnerability in Tanium Server. |
Pozostałe |
CVSS 4,3EPSS 0,25 % | ||
| CVE-2026-108325 Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation. |
Pozostałe |
CVSS 6,6EPSS 0,24 % | ||
| CVE-2026-108326 Tanium addressed an improper certificate validation vulnerability in Stream Client Extension. |
Pozostałe |
CVSS 6,5EPSS 0,18 % | ||
| CVE-2026-108328 Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response. |
Pozostałe |
CVSS 4,2EPSS 0,23 % | ||
| CVE-2026-108329 Tanium addressed an unauthorized code execution vulnerability in Threat Response. |
Monitoruj |
CVSS 8,8EPSS 0,5 % | ||
| CVE-2026-108330 Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. |
Pozostałe |
CVSS 3,6EPSS 0,13 % | ||
| CVE-2026-108331 Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. |
Pozostałe |
CVSS 3,3EPSS 0,14 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 12.11.2026, 23:02 UTC – 13.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.