Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| SemanticMediaWiki | CVE-2026-116877 Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows low-privilege editors to bypass smwgMaxNumRecurringEvents by supplying a large limit parameter. Attackers can save pages using #set_recurring_event without an end date to generate… |
8,7 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| SemanticMediaWiki | CVE-2026-116878 Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic computation by supplying a zero limit to Special:PropertyLabelSimilarity. Attackers can send repeated requests with limit=0 to bypass the SQL… |
8,7 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| SemanticMediaWiki | CVE-2026-116879 Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with edit rights to force semantic updates on arbitrary pages. Attackers can supply a serialized subject parameter for a restricted page to trigger forced… |
6,9 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| Octopus Server | CVE-2026-116870 In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. This could result in a token issued from a suitably configured non legitimate issuer being accepted as a token belonging to a service account from a legitimate trusted issuer. Exploitation requires a… |
8,7 | 0,23 % | Brak wpisu w KEV nie wyklucza ataków | |
| SemanticMediaWiki | CVE-2026-116871 Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescription() that processes nested query tokens before depth limits apply. Unauthenticated attackers can submit deeply nested query elements to the action=ask API to consume… |
8,7 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| SemanticMediaWiki | CVE-2026-116872 Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize_compact_form() that allows unauthenticated attackers to cause quadratic CPU consumption. Attackers can submit long search terms with many distinct in:(...) or has:(...) expressions… |
8,7 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| vaadin / flow / framework | CVE-2026-110737 The push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-Allow-Origin response header and allows credentials, because Flow configures Atmosphere with DROP_ACCESS_CONTROL_ALLOW_ORIGIN_HEADER set to false and its CorsInterceptor then echoes… |
2,3 | 0,19 % | Brak wpisu w KEV nie wyklucza ataków | |
| NPort W2150A-W4/W2250A-W4 Series | CVE-2026-111548 A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied input, causing the web management service to become… |
5,3 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| HiRDB Server Version 10 / HiRDB Server Version 9 / HiRDB Server with Additional Function Version 9 (+2 produktów) | CVE-2026-82119 OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through… |
9,8 | 1,05 % | Brak wpisu w KEV nie wyklucza ataków | |
| HiRDB Server Version 10 / HiRDB Server Version 9 / HiRDB Server with Additional Function Version 9 (+2 produktów) | CVE-2026-82120 Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02… |
9,8 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| HiRDB Server Version 10 / HiRDB Server Version 9 / HiRDB Server with Additional Function Version 9 (+2 produktów) | CVE-2026-82121 Origin Validation Error Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through… |
7,5 | 0,21 % | Brak wpisu w KEV nie wyklucza ataków | |
| HiRDB Server Version 10 / HiRDB Server Version 9 / HiRDB Server with Additional Function Version 9 (+2 produktów) | CVE-2026-82122 Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02… |
9,4 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| Compute Engine | CVE-2026-85299 A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute Engine versions prior to 2026-08-31 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-project disk data. This vulnerability was patched on 31 August… |
8,3 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| JP1/Base | CVE-2026-86574 Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 11-00 before 12-50-54. |
9,8 | 0,52 % | Brak wpisu w KEV nie wyklucza ataków | |
| JP1/Integrated Management 3 - Manager / JP1/Automatic Job Management System 3 - Manager / JP1/Automatic Job Management System 3 - Agent (+2 produktów) | CVE-2026-86575 Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31;… |
9,4 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| JP1/Integrated Management 3 - Manager / JP1/Automatic Job Management System 3 - Manager / JP1/Automatic Job Management System 3 - Agent (+2 produktów) | CVE-2026-86576 Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31;… |
9,4 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| JP1/Integrated Management 3 - Manager / JP1/Automatic Job Management System 3 - Manager / JP1/Automatic Job Management System 3 - Agent (+2 produktów) | CVE-2026-86577 Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31;… |
9,4 | 0,46 % | Brak wpisu w KEV nie wyklucza ataków | |
| JP1/Automatic Job Management System 3 - Manager | CVE-2026-76935 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. |
9,4 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| JP1/Automatic Job Management System 3 - Manager | CVE-2026-76936 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. |
9,4 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| JP1/Automatic Job Management System 3 - Manager | CVE-2026-76937 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. |
9,4 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| JP1/Automatic Job Management System 3 - Manager | CVE-2026-76938 Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. |
9,8 | 0,64 % | Brak wpisu w KEV nie wyklucza ataków | |
| JP1/Automatic Job Management System 3 - Manager / JP1/Automatic Job Management System 3 - Agent | CVE-2026-76939 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31. |
9,8 | 0,52 % | Brak wpisu w KEV nie wyklucza ataków | |
| HiRDB Server Version 10 / HiRDB Server Version 9 / HiRDB Server with Additional Function Version 9 (+2 produktów) | CVE-2026-82116 Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version… |
9,8 | 0,61 % | Brak wpisu w KEV nie wyklucza ataków | |
| HiRDB Server Version 10 / HiRDB Server Version 9 / HiRDB Server with Additional Function Version 9 (+2 produktów) | CVE-2026-82117 Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from… |
9,8 | 0,64 % | Brak wpisu w KEV nie wyklucza ataków | |
| HiRDB Server Version 10 / HiRDB Server Version 9 / HiRDB Server with Additional Function Version 9 (+2 produktów) | CVE-2026-82118 Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02… |
9,8 | 0,52 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 14.11.2026, 23:02 UTC – 15.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.