Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| kit | CVE-2026-114060 SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form actions (use:enhance) on routes accepting paths beginning with a double slash. Attackers can craft action paths starting with // that become protocol-relative URLs, causing non-redirect form results to… |
2,1 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| kit | CVE-2026-114061 SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a cache-control header value set via setHeaders is inserted without escaping into a <meta http-equiv="cache-control"> tag. An attacker who can influence that untrusted value at… |
2,3 | 0,21 % | Brak wpisu w KEV nie wyklucza ataków | |
| kit | CVE-2026-114062 SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server,… |
6,9 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| kit | CVE-2026-114063 SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on Windows that allows unauthenticated attackers to read files outside the prerendered output directory. Attackers who can reach the preview server through network access or a… |
8,7 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| snipe-it | CVE-2026-114064 Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, including loopback and RFC1918 ranges. Attackers can point webhooks at internal hosts and ports, then compare 4xx versus 5xx… |
5,1 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| trigger.dev | CVE-2026-114065 Trigger.dev before 4.7.3 contains a tenant filtering bypass vulnerability that allows authenticated users to read other tenants' data by using placeholder table syntax in POST /api/v1/query. Attackers can submit queries with FROM {database.table} expressions, including within subqueries, to skip… |
7,1 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| vllm | CVE-2026-114053 vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients select which revision of a model's dynamic processor code is imported when trust_remote_code is enabled. An attacker controlling a revision… |
9,2 | 0,46 % | Brak wpisu w KEV nie wyklucza ataków | |
| vllm | CVE-2026-114054 vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cache_salt. Attackers can set a UUID EXIF ImageID to receive another request's cached processed media, or match… |
7,1 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| vllm | CVE-2026-114055 vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients to control multimodal processor parameters by supplying per-request mm_processor_kwargs. Attackers can set large image size, patch count, crop count, or frame count values in Isaac,… |
8,7 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| arcadedb | CVE-2026-114056 ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify edge type lightweight and unique schema flags without UPDATE_SCHEMA permission. Attackers can send a bare ALTER TYPE edgeType WITH lightweight = true command over the HTTP,… |
5,3 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| arcadedb | CVE-2026-114057 ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that allows authenticated users to enumerate all database names. Attackers with credentials for any single database can issue a SHOW DATABASES query over the Bolt port to reveal… |
5,3 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| arcadedb | CVE-2026-114058 ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that lets authenticated users read other databases' schema metadata. Attackers with credentials for one database can set the db field in RUN or BEGIN messages and call db.labels() or… |
5,3 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| arcadedb | CVE-2026-114059 ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-only reader role holders, to execute Groovy code because GremlinQueryEngine.command() lacks scripting authorization checks. Attackers can submit Gremlin commands to the POST… |
7,7 | 0,64 % | Brak wpisu w KEV nie wyklucza ataków | |
| FreeRDP | CVE-2026-114046 FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious RDP server can send a crafted reader-state entry with a null szReader, causing strcmp or _wcscmp to crash the client… |
7,1 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| FreeRDP | CVE-2026-114047 FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted target TLS certificates when no verification module is configured. Network-positioned attackers can intercept the proxy's outbound connection and present a self-signed,… |
7,6 | 0,19 % | Brak wpisu w KEV nie wyklucza ataków | |
| AVideo | CVE-2026-114048 WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php that bypass the .json.php-only autoCSRFGuard() check. Attackers can lure logged-in users to a page with an auto-submitting form to make private playlists public, remove playlist… |
5,1 | 0,17 % | Brak wpisu w KEV nie wyklucza ataków | |
| vllm | CVE-2026-114049 vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote attackers to constrain other clients' outputs by leaving stale allowed_token_ids rows. Attackers can submit concurrent constrained generate requests, including via unauthenticated /invocations, so… |
6,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| vllm | CVE-2026-114050 vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache hits, allowing engine crashes. Unauthenticated attackers can desynchronize the P0/P1 processor caches to trigger a fatal token-placeholder mismatch, killing the entire serving… |
7,1 | 0,21 % | Brak wpisu w KEV nie wyklucza ataków | |
| vllm | CVE-2026-114051 vLLM before 0.31.0 skips the min_tokens <= max_tokens check for /inference/v1/generate requests with a null max_tokens, so the EngineCore input thread later dies on an uncaught VLLMValidationError while /health still returns 200. Unauthenticated remote attackers can send one request with an… |
7,1 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| vllm | CVE-2026-114052 vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a processor for every distinct request-controlled mm_processor_kwargs value in an unbounded dictionary. Unauthenticated attackers can send distinct or oversized mel_config values… |
8,7 | 0,51 % | Brak wpisu w KEV nie wyklucza ataków | |
| device-mapper-multipath / Red Hat OpenShift Container Platform 4 / Red Hat OpenShift Container Platform 5 | CVE-2026-114038 A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure,… |
5,1 | 0,12 % | Brak wpisu w KEV nie wyklucza ataków | |
| FreeRDP | CVE-2026-114041 FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a byte count as wide-character printf precision. A malicious RD Gateway can send pre-authentication consent or service messages, causing the client to read twice the buffer size,… |
6,9 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| FreeRDP | CVE-2026-114042 FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocator when totalLength is smaller than the chunk size. A malicious RDP server can send a single well-formed Virtual Channel PDU to trigger the free and crash the… |
7,1 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| FreeRDP | CVE-2026-114043 FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because winpr_read_png_from_buffer() allocates a bit-packed buffer for PNGs with bit depth below 8, while winpr_bitmap_write_buffer() copies rows assuming one byte per pixel. A malicious RDP… |
7,1 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| FreeRDP | CVE-2026-114044 FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP servers to read beyond surface buffers by supplying unvalidated mappedWidth and mappedHeight values. Attackers can send a crafted RDPGFX_MAP_SURFACE_TO_WINDOW_PDU with oversized… |
6,9 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.