|
cve-2026-105790
|
|
Microsoft UFO: Authenticated Galaxy device registratio…
|
microsoft
|
UFO
|
2026-10-06T14:08:24.075Z |
2026-10-06T17:17:10.713Z |
|
cve-2026-105789
|
|
Microsoft UFO: Arbitrary file write in the Linux MCP `…
|
microsoft
|
UFO
|
2026-10-06T14:07:25.605Z |
2026-10-06T14:47:07.288Z |
|
cve-2026-105788
|
|
Microsoft UFO: Authenticated Android shell command inj…
|
microsoft
|
UFO
|
2026-10-06T14:05:24.022Z |
2026-10-06T15:08:18.093Z |
|
cve-2026-106041
|
6.9 (v4.0)
6.5 (v3.1)
|
Mooncake Store through 0.3.13.post1 Missing Authorizat…
|
kvcache-ai
|
Mooncake
|
2026-10-06T14:03:17.708Z |
2026-10-06T17:16:25.232Z |
|
cve-2026-106040
|
8.8 (v4.0)
8.2 (v3.1)
|
Mooncake Store through 0.3.13.post1 Missing Authorizat…
|
kvcache-ai
|
Mooncake
|
2026-10-06T14:03:17.053Z |
2026-10-06T19:30:24.362Z |
|
cve-2026-106039
|
6.9 (v4.0)
6.5 (v3.1)
|
Mooncake Store through 0.3.13.post1 Missing Authorizat…
|
kvcache-ai
|
Mooncake
|
2026-10-06T14:03:16.417Z |
2026-10-06T15:37:52.711Z |
|
cve-2026-106038
|
8.8 (v4.0)
8.2 (v3.1)
|
Mooncake Store through 0.3.13.post1 Unauthenticated Ob…
|
kvcache-ai
|
Mooncake
|
2026-10-06T14:03:15.496Z |
2026-10-09T01:00:52.284Z |
|
cve-2026-106037
|
9.3 (v4.0)
9.8 (v3.1)
|
Mooncake through 0.3.13.post1 Missing Authentication i…
|
kvcache-ai
|
Mooncake
|
2026-10-06T14:03:14.718Z |
2026-10-06T16:10:40.481Z |
|
cve-2026-85523
|
8.8 (v3.1)
|
OS Command Injection in Felisify Informatics' SambaBox
|
Felisify Information Technologies Industry and Trade Inc.
|
SambaBox
|
2026-10-06T13:55:32.647Z |
2026-10-06T19:30:35.812Z |
|
cve-2026-34498
|
5.1 (v4.0)
|
L4L
|
Johnson Controls
|
Illustra Standard - L4L China
|
2026-10-06T13:52:54.733Z |
2026-10-06T19:30:41.991Z |
|
cve-2026-91140
|
9.6 (v3.1)
|
OS command injection in Progress Software Autonomous R…
|
Progress Software
|
Autonomous REST Connector GenAI Agents
|
2026-10-06T13:46:11.357Z |
2026-10-07T03:55:20.033Z |
|
cve-2026-87975
|
|
Privilege abuse in model formsets with editable primary keys
|
djangoproject
|
Django
|
2026-10-06T13:35:59.505Z |
2026-10-06T13:53:32.999Z |
|
cve-2026-106026
|
6.3 (v4.0)
3.7 (v3.1)
|
tftp-hpa 5.4 before 6.0 Out-of-Bounds Read via tftpd R…
|
H. Peter Anvin
|
tftp-hpa
|
2026-10-06T13:35:48.642Z |
2026-10-06T17:15:34.212Z |
|
cve-2026-105842
|
6.1 (v4.0)
6.4 (v3.1)
|
lrzsz before 0.13.0 Heap Buffer Overflow via lrz proch…
|
Uwe Ohse
|
lrzsz
|
2026-10-06T13:35:47.550Z |
2026-10-06T19:30:50.710Z |
|
cve-2026-105841
|
7.7 (v4.0)
7.5 (v3.1)
|
lrzsz before 0.13.0 OS Command Injection via lrz Pipe Mode
|
Uwe Ohse
|
lrzsz
|
2026-10-06T13:35:46.900Z |
2026-10-06T13:58:44.875Z |
|
cve-2026-105840
|
7.7 (v4.0)
7.5 (v3.1)
|
lrzsz before 0.13.0 Path Traversal via lrz Restricted …
|
Uwe Ohse
|
lrzsz
|
2026-10-06T13:35:46.072Z |
2026-10-09T00:59:56.280Z |
|
cve-2026-105839
|
8.5 (v4.0)
7.8 (v3.1)
|
libmikmod before 3.3.14 Heap Buffer Overflow via OKT L…
|
sezero
|
libmikmod
|
2026-10-06T13:35:45.261Z |
2026-10-06T16:12:22.301Z |
|
cve-2026-105838
|
6.8 (v4.0)
5.5 (v3.1)
|
libmikmod before 3.3.14 Heap Out-of-Bounds Read via IT…
|
sezero
|
libmikmod
|
2026-10-06T13:35:44.474Z |
2026-10-06T17:14:37.357Z |
|
cve-2026-105837
|
8.5 (v4.0)
7.8 (v3.1)
|
libmikmod before 3.3.14 Heap Buffer Overflow via DSM L…
|
sezero
|
libmikmod
|
2026-10-06T13:35:43.526Z |
2026-10-06T19:30:57.174Z |
|
cve-2026-87890
|
|
Potential request forgery via spatial lookup byte values
|
djangoproject
|
Django
|
2026-10-06T13:35:37.964Z |
2026-10-06T14:06:56.731Z |
|
cve-2026-84429
|
|
Potential denial-of-service vulnerability in HTTP head…
|
djangoproject
|
Django
|
2026-10-06T13:35:17.443Z |
2026-10-06T14:15:10.916Z |
|
cve-2026-77050
|
|
Potential denial-of-service vulnerability in get_suppo…
|
djangoproject
|
Django
|
2026-10-06T13:34:40.107Z |
2026-10-06T14:21:29.655Z |
|
cve-2026-82924
|
5.3 (v3.1)
|
PII Enumeration via Missing Rate Limiting in Pusula Co…
|
Pusula Communication, IT, and Internet Industry and Trade Co. Ltd.
|
Expert Mail
|
2026-10-06T13:33:39.061Z |
2026-10-06T19:31:08.209Z |
|
cve-2026-105920
|
|
Kusalkasilva Learning-Management-System Student Regist…
|
Kusalkasilva
|
Learning-Management-System
|
2026-10-06T13:30:11.719Z |
2026-10-09T00:59:05.177Z |
|
cve-2025-15591
|
5.3 (v4.0)
|
Cross-Site Scripting (XSS) vulnerability identified in…
|
OpenText
|
Content Management
|
2026-10-06T13:28:04.655Z |
2026-10-07T17:07:55.983Z |
|
cve-2026-12380
|
6.1 (v3.1)
|
Reflected XSS in Akıllı Ticaret's E-Commerce Pack
|
Akıllı Ticaret Software Technologies Ltd. Co.
|
E-Commerce Pack
|
2026-10-06T13:05:16.655Z |
2026-10-06T19:31:14.540Z |
|
cve-2026-105919
|
|
Kusalkasilva Learning-Management-System Administrator …
|
Kusalkasilva
|
Learning-Management-System
|
2026-10-06T13:00:15.810Z |
2026-10-06T17:12:29.497Z |
|
cve-2026-105836
|
5.3 (v4.0)
5.4 (v3.1)
|
QloApps through 1.7.0 Authorization Bypass via ajaxPro…
|
Webkul
|
QloApps
|
2026-10-06T12:57:55.983Z |
2026-10-16T18:35:55.160Z |
|
cve-2026-105835
|
9.1 (v4.0)
7.4 (v3.1)
|
PLANKA 2.2.0 through 2.2.1 TOTP Brute Force via verify…
|
planka
|
planka
|
2026-10-06T12:57:55.187Z |
2026-10-09T00:58:23.881Z |
|
cve-2026-105834
|
7.1 (v4.0)
6.5 (v3.1)
|
Rundeck before 6.2.0 Arbitrary File Read via File Reso…
|
rundeck
|
rundeck
|
2026-10-06T12:57:51.615Z |
2026-10-06T16:13:38.357Z |