Niska
CVE-2026-11312
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 6 839
Wyczyść filtry
Wysoka
CVE-2026-11332
ansible-core: Argument injection in ansible-galaxy role install leads to arbitrary code execution
Wysoka
CVE-2026-44393
OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake
Niska
CVE-2026-50266
OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks
Niska
CVE-2026-10801
ms-swift: Image Cache Hash Collision via Missing Dimension Metadata
Krytyczna
CVE-2026-41283
OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed
Średnia
CVE-2026-48681
OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image
Niska
CVE-2026-10813
LMCache: 16-bit multimodal hash collision can poison KV cache entries
Niska
CVE-2026-10812
GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix
Niska
CVE-2026-10766
mlrun: DataFrame hash collisions can cause dataset artifact path conflicts and silent data corruption
Średnia
CVE-2026-46447
OpenStack Ironic allows Boot Script Injection
Średnia
CVE-2026-73627
JupyterLab PluginManager lock-rule enforcement bypass
Niska
CVE-2026-73626
JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for direct callers (missing `await`)
Średnia
CVE-2026-47143
Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds
Wysoka
CVE-2026-67324
GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>) when enforcing its default unsafe-option gate. When an application passes atta
Nieoceniona
CVE-2023-54366
SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database ac
Średnia
ghsa-mfr4-mq8w-vmg6
PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs
Wysoka
CVE-2026-53598
Prompty: Arbitrary file read via file reference expansion
Średnia
ghsa-8rqh-vxpr-x77p
plone.restapi: Stored XSS by spoofing mime type
Krytyczna
CVE-2025-65720
GPT Researcher MCP STDIO configuration allows remote command execution
Wysoka
CVE-2026-105315
django-haystack: Remote Code Execution via `eval()` in Elasticsearch Result Deserialization
Wysoka
CVE-2026-58659
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
Wysoka
CVE-2026-59886
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
Wysoka
CVE-2026-59197
Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.