p.podatnosc.pl
ZakresWszystkie technologie
WszystkieObserwowaneUstaw technologie

KATALOG PODATNOŚCI

Publikacje w kolejności czasu

Chronologiczny przegląd publikacji. Ostatnie modyfikacje są w osobnym widoku.

Więcej filtrów · producent, sygnały, CVSS

Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.

Wyświetlono 7526–7550 z 104 687 dopasowań.

CVE-2026-87097

Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,22 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-87098

Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

PozostałeOpis źródłowy · EN
CVSS
3,1
EPSS
0,18 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-87099

Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

PozostałeOpis źródłowy · EN
CVSS
5,7
EPSS
0,24 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-87100

Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.

PozostałeOpis źródłowy · EN
CVSS
3,6
EPSS
0,1 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-87101

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

PozostałeOpis źródłowy · EN
CVSS
6,2
EPSS
0,1 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-87102

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

MonitorujOpis źródłowy · EN
CVSS
7,4
EPSS
0,22 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-87103

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.

MonitorujOpis źródłowy · EN
CVSS
7,4
EPSS
0,22 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-6064

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred…

MonitorujOpis źródłowy · EN
CVSS
7,3
EPSS
0,12 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-86377

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Out-of-bounds…

MonitorujOpis źródłowy · EN
CVSS
7,6
EPSS
0,3 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-86378

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based…

MonitorujOpis źródłowy · EN
CVSS
8,8
EPSS
0,37 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112197

Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,4
EPSS
0,38 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112198

XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with…

MonitorujOpis źródłowy · EN
CVSS
8,3
EPSS
0,16 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-115223

The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its template engine, because the filter meant to strip template delimiters runs before a…

PozostałeOpis źródłowy · EN
CVSS
4,9
EPSS
0,42 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-103780

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,83 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-103792

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,6
EPSS
0,37 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-103799

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,6
EPSS
0,34 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-106648

The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before substituting them into the recipient addresses of its form notification emails, allowing unauthenticated attackers to replace the recipient list…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,3 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110508

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow, which could allow unauthenticated users to register and log in without…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,27 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110540

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain…

MonitorujOpis źródłowy · EN
CVSS
7,1
EPSS
0,32 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110541

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper…

MonitorujOpis źródłowy · EN
CVSS
7,2
EPSS
1,81 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-101272

The mechanism binding files generated during a shredding process to the authentication method is not working correctly and the same session token is used for all token-based API users. This is similar to an issue fixed in 2026.7.1 but was missed while…

PozostałeOpis źródłowy · EN
CVSS
2,3
EPSS
0,35 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-101273

Some of our API endpoints allowed to create order payments referencing a gift card by using the auto-incremented internal ID. This ID was not checked and allowed creating payments that reference gift cards from different organizers and thereby obtaining…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,37 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-101274

When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an authorization request against the configured grant type of the SSO client. This means…

PozostałeOpis źródłowy · EN
CVSS
6,9
EPSS
0,39 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-103313

The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confirmation to the order it completes, nor verify the confirmed amount, allowing an unauthenticated attacker who holds a single genuine…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,16 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-103330

The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifications, as the verification is keyed on a merchant secret that is empty by default and the rest of the signed data is…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,16 %
Publikacja
Poprawka
Status poprawki nieustalony
Podatności: CVE, produkt, opis, sygnały zagrożenia, CVSS, EPSS i data publikacji.
CVE / produktSygnałyOcenyPublikacjaZapisz
CVE-2026-87097

Sensitive information disclosure due to insufficiently protected credentials. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Pozostałe
 CVSS 5,3EPSS 0,22 %
CVE-2026-87098

Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Pozostałe
 CVSS 3,1EPSS 0,18 %
CVE-2026-87099

Cross-site scripting (XSS) vulnerability due to improper input validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Pozostałe
 CVSS 5,7EPSS 0,24 %
CVE-2026-87100

Protection mechanism failure due to missing binary hardening in Linux executables. The following products are affected: Acronis Cyber Protect 17 (Linux) before build 42587.
Pozostałe
 CVSS 3,6EPSS 0,1 %
CVE-2026-87101

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Pozostałe
 CVSS 6,2EPSS 0,1 %
CVE-2026-87102

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Monitoruj
 CVSS 7,4EPSS 0,22 %
CVE-2026-87103

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587.
Monitoruj
 CVSS 7,4EPSS 0,22 %
CVE-2026-6064

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged…
Monitoruj
 CVSS 7,3EPSS 0,12 %
CVE-2026-86377

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Monitoruj
 CVSS 7,6EPSS 0,3 %
CVE-2026-86378

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Monitoruj
 CVSS 8,8EPSS 0,37 %
CVE-2026-112197

Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods…
Wysoki priorytet
 CVSS 9,4EPSS 0,38 %
CVE-2026-112198

XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller…
Monitoruj
 CVSS 8,3EPSS 0,16 %
CVE-2026-115223

The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its template engine,…
Pozostałe
 CVSS 4,9EPSS 0,42 %
CVE-2026-103780

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Wysoki priorytet
 CVSS 9,8EPSS 0,83 %
CVE-2026-103792

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through…
Wysoki priorytet
 CVSS 9,6EPSS 0,37 %
CVE-2026-103799

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through…
Wysoki priorytet
 CVSS 9,6EPSS 0,34 %
CVE-2026-106648

The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before substituting them into the recipient addresses of its form notification…
Pozostałe
 CVSS 5,3EPSS 0,3 %
CVE-2026-110508

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow,…
Pozostałe
 CVSS 5,3EPSS 0,27 %
CVE-2026-110540

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through…
Monitoruj
 CVSS 7,1EPSS 0,32 %
CVE-2026-110541

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Monitoruj
 CVSS 7,2EPSS 1,81 %
CVE-2026-101272

The mechanism binding files generated during a shredding process to the authentication method is not working correctly and the same session token is used for all token-based API users.…
Pozostałe
 CVSS 2,3EPSS 0,35 %
CVE-2026-101273

Some of our API endpoints allowed to create order payments referencing a gift card by using the auto-incremented internal ID. This ID was not checked and allowed creating payments that…
Pozostałe
 CVSS 5,3EPSS 0,37 %
CVE-2026-101274

When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an authorization…
Pozostałe
 CVSS 6,9EPSS 0,39 %
CVE-2026-103313

The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confirmation to the order it completes, nor verify the confirmed amount,…
Pozostałe
 CVSS 5,3EPSS 0,16 %
CVE-2026-103330

The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifications, as the verification is keyed on a merchant secret that is…
Pozostałe
 CVSS 5,3EPSS 0,16 %
Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 10.11.2026, 19:32 UTC – 10.11.2026, 21:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.

Więcej możliwości