p.podatnosc.pl
ZakresWszystkie technologie
WszystkieObserwowaneUstaw technologie

KATALOG PODATNOŚCI

Publikacje w kolejności czasu

Chronologiczny przegląd publikacji. Ostatnie modyfikacje są w osobnym widoku.

Więcej filtrów · producent, sygnały, CVSS

Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.

Wyświetlono 7951–7975 z 104 982 dopasowań.

CVE-2026-112197

Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,4
EPSS
0,38 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-112198

XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with…

MonitorujOpis źródłowy · EN
CVSS
8,3
EPSS
0,16 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-115223

The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its template engine, because the filter meant to strip template delimiters runs before a…

PozostałeOpis źródłowy · EN
CVSS
4,9
EPSS
0,42 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-103780

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,8
EPSS
0,83 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-103792

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,6
EPSS
0,37 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-103799

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain…

Wysoki priorytetOpis źródłowy · EN
CVSS
9,6
EPSS
0,34 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-106648

The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before substituting them into the recipient addresses of its form notification emails, allowing unauthenticated attackers to replace the recipient list…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,3 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110508

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow, which could allow unauthenticated users to register and log in without…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,27 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110540

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain…

MonitorujOpis źródłowy · EN
CVSS
7,1
EPSS
0,32 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-110541

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper…

MonitorujOpis źródłowy · EN
CVSS
7,2
EPSS
1,81 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-101272

The mechanism binding files generated during a shredding process to the authentication method is not working correctly and the same session token is used for all token-based API users. This is similar to an issue fixed in 2026.7.1 but was missed while…

PozostałeOpis źródłowy · EN
CVSS
2,3
EPSS
0,35 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-101273

Some of our API endpoints allowed to create order payments referencing a gift card by using the auto-incremented internal ID. This ID was not checked and allowed creating payments that reference gift cards from different organizers and thereby obtaining…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,37 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-101274

When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an authorization request against the configured grant type of the SSO client. This means…

PozostałeOpis źródłowy · EN
CVSS
6,9
EPSS
0,39 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-103313

The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confirmation to the order it completes, nor verify the confirmed amount, allowing an unauthenticated attacker who holds a single genuine…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,16 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-103330

The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifications, as the verification is keyed on a merchant secret that is empty by default and the rest of the signed data is…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,16 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-103779

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper…

MonitorujOpis źródłowy · EN
CVSS
8,3
EPSS
0,47 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2025-30414

Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587.

MonitorujOpis źródłowy · EN
CVSS
7,1
EPSS
0,21 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-92665

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Allocation of…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,41 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-86388

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper…

PozostałeOpis źródłowy · EN
CVSS
5,3
EPSS
0,31 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-86389

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer…

MonitorujOpis źródłowy · EN
CVSS
7,2
EPSS
0,53 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-86390

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing…

PozostałeOpis źródłowy · EN
CVSS
6,5
EPSS
0,33 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-86391

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain…

PozostałeOpis źródłowy · EN
CVSS
6,4
EPSS
0,38 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-86392

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Heap-based…

PozostałeOpis źródłowy · EN
CVSS
4,9
EPSS
0,34 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-86393

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper…

MonitorujOpis źródłowy · EN
CVSS
7,2
EPSS
0,33 %
Publikacja
Poprawka
Status poprawki nieustalony

CVE-2026-86394

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper…

MonitorujOpis źródłowy · EN
CVSS
7,2
EPSS
2,19 %
Publikacja
Poprawka
Status poprawki nieustalony
Podatności: CVE, produkt, opis, sygnały zagrożenia, CVSS, EPSS i data publikacji.
CVE / produktSygnałyOcenyPublikacjaZapisz
CVE-2026-112197

Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods…
Wysoki priorytet
 CVSS 9,4EPSS 0,38 %
CVE-2026-112198

XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller…
Monitoruj
 CVSS 8,3EPSS 0,16 %
CVE-2026-115223

The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its template engine,…
Pozostałe
 CVSS 4,9EPSS 0,42 %
CVE-2026-103780

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Wysoki priorytet
 CVSS 9,8EPSS 0,83 %
CVE-2026-103792

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through…
Wysoki priorytet
 CVSS 9,6EPSS 0,37 %
CVE-2026-103799

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through…
Wysoki priorytet
 CVSS 9,6EPSS 0,34 %
CVE-2026-106648

The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before substituting them into the recipient addresses of its form notification…
Pozostałe
 CVSS 5,3EPSS 0,3 %
CVE-2026-110508

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow,…
Pozostałe
 CVSS 5,3EPSS 0,27 %
CVE-2026-110540

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through…
Monitoruj
 CVSS 7,1EPSS 0,32 %
CVE-2026-110541

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Monitoruj
 CVSS 7,2EPSS 1,81 %
CVE-2026-101272

The mechanism binding files generated during a shredding process to the authentication method is not working correctly and the same session token is used for all token-based API users.…
Pozostałe
 CVSS 2,3EPSS 0,35 %
CVE-2026-101273

Some of our API endpoints allowed to create order payments referencing a gift card by using the auto-incremented internal ID. This ID was not checked and allowed creating payments that…
Pozostałe
 CVSS 5,3EPSS 0,37 %
CVE-2026-101274

When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an authorization…
Pozostałe
 CVSS 6,9EPSS 0,39 %
CVE-2026-103313

The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confirmation to the order it completes, nor verify the confirmed amount,…
Pozostałe
 CVSS 5,3EPSS 0,16 %
CVE-2026-103330

The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifications, as the verification is keyed on a merchant secret that is…
Pozostałe
 CVSS 5,3EPSS 0,16 %
CVE-2026-103779

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Monitoruj
 CVSS 8,3EPSS 0,47 %
CVE-2025-30414

Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17…
Monitoruj
 CVSS 7,1EPSS 0,21 %
CVE-2026-92665

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Pozostałe
 CVSS 5,3EPSS 0,41 %
CVE-2026-86388

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Pozostałe
 CVSS 5,3EPSS 0,31 %
CVE-2026-86389

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Monitoruj
 CVSS 7,2EPSS 0,53 %
CVE-2026-86390

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Pozostałe
 CVSS 6,5EPSS 0,33 %
CVE-2026-86391

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through…
Pozostałe
 CVSS 6,4EPSS 0,38 %
CVE-2026-86392

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Pozostałe
 CVSS 4,9EPSS 0,34 %
CVE-2026-86393

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Monitoruj
 CVSS 7,2EPSS 0,33 %
CVE-2026-86394

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026…
Monitoruj
 CVSS 7,2EPSS 2,19 %
Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 11.11.2026, 11:32 UTC – 11.11.2026, 13:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.

Więcej możliwości