Wysoka
CVE-2026-35397
Archiwum podatności
Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 6 861
Wyczyść filtry
Krytyczna
CVE-2026-42196
django-s3file is vulnerable to relative path traversal
Krytyczna
CVE-2026-27960
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation vulnerability that can be exploit
Krytyczna
CVE-2026-42048
Langflow Knowledge Bases API is Vulnerable to Path Traversal
Krytyczna
CVE-2026-42864
FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft
Krytyczna
CVE-2026-25660
Codechecker has an authentication bypass for certain API calls
Niska
CVE-2026-6907
Django Uses Cache Containing Sensitive Information
Średnia
CVE-2026-5766
Django has an Improper Handling of Length Parameter Inconsistency
Niska
CVE-2026-35192
Django Uses Persistent Cookies Containing Sensitive Information
Średnia
CVE-2025-61669
Jupyter Server has an open redirection vulnerability in `next` query parameter
Średnia
ghsa-8pqq-224h-x875
ogham-mcp had credentials embedded in published PyPI sdists -- Neon postgres URLs and Voyage API key
Wysoka
CVE-2026-42088
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0-rc3, the Script Runner widget allows users to execute Pyt
Krytyczna
CVE-2026-42087
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before version 7.0.0-rc3, a SQL injection vulnerability ex
Wysoka
CVE-2026-42084
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, the OpenC3 password change functionality
Średnia
CVE-2026-42085
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in
Średnia
CVE-2026-42086
OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender
Wysoka
CVE-2026-7579
AstrBot Makes Use of Hard-coded Password
Wysoka
CVE-2026-43001
OpenStack Keystone has an Incorrect Authorization Issue
Wysoka
CVE-2026-43003
OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere
Krytyczna
CVE-2026-42354
Sentry's improper authentication on SAML SSO process allows user identity linking
Wysoka
CVE-2026-40171
Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS
Średnia
CVE-2026-41016
apache-airflow-providers-smtp: No certificate validation on SMTP STARTTLS connections in SMTP provider
Krytyczna
CVE-2026-24178
NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A succe
Niska
CVE-2026-7141
vLLM makes Use of Uninitialized Resource
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.