Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-114381 itsourcecode Online Cake Ordering System orderdetail.p… itsourcecode
Online Cake Ordering System
2026-10-21T21:15:17.882Z 2026-10-23T21:18:36.060Z
cve-2026-114508 Laravel relationship inclusion can trigger unauthorize… laravel
framework
2026-10-21T21:45:31.465Z 2026-10-23T21:18:11.415Z
cve-2026-114384 itsourcecode Online Cake Ordering System transactionsa… itsourcecode
Online Cake Ordering System
2026-10-21T22:00:18.707Z 2026-10-23T21:17:46.796Z
cve-2026-114441 oretnom23 php-travel-agency-system update.php sql injection oretnom23
php-travel-agency-system
2026-10-21T22:45:18.510Z 2026-10-23T21:17:17.273Z
cve-2026-114576 Linksys RE6250 Web Management strcmp random values Linksys
RE6250
2026-10-22T01:30:21.675Z 2026-10-23T21:16:58.599Z
cve-2017-20289 7.7 (v4.0) 7.5 (v3.1) Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local … Broadstreet
Ad Widget
2026-10-22T10:57:23.974Z 2026-10-23T21:16:32.796Z
cve-2019-25778 8.8 (v4.0) 8.2 (v3.1) SeaCMS 8.7 SQL Injection via comment/api/index.php rli… SeaCMS
SeaCMS
2026-10-22T10:57:26.733Z 2026-10-23T21:16:06.927Z
cve-2021-48014 9.3 (v4.0) 9.8 (v3.1) FineReport 9.0 Unauthenticated Path Traversal File Wri… FanRuan
FineReport
2026-10-22T10:57:29.782Z 2026-10-23T21:15:46.961Z
cve-2022-51021 8.8 (v4.0) 8.2 (v3.1) NotificationX WordPress Plugin < 2.3.12 Unauthenticate… WPDeveloper
NotificationX
2026-10-22T10:57:32.517Z 2026-10-23T21:15:37.175Z
cve-2022-51025 7.1 (v4.0) 6.5 (v3.1) Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Trave… Penta Security Systems
WAPPLES
2026-10-22T10:57:35.298Z 2026-10-23T21:15:30.156Z
cve-2024-58396 8.7 (v4.0) 7.5 (v3.1) YouDataSum CPAS Audit Management System V4 Path Traver… YouDataSum
CPAS Audit Management System
2026-10-22T10:57:38.109Z 2026-10-23T21:15:23.595Z
cve-2026-115247 subhajitkhan online-clinic-management-system patientre… subhajitkhan
online-clinic-management-system
2026-10-22T13:15:19.125Z 2026-10-23T21:15:01.427Z
cve-2026-75507 GraphQL-core: Denial of service via quadratic complexi… graphql-python
graphql-core
2026-10-22T16:12:38.424Z 2026-10-23T21:08:40.217Z
cve-2026-108358 PhpSpreadsheet: XmlScanner Bypass via ISO-2022 Escape … PHPOffice
PhpSpreadsheet
2026-10-22T17:29:56.449Z 2026-10-23T21:08:28.517Z
cve-2026-108357 PhpSpreadsheet: XmlScanner Bypass via Double-Encoded u… PHPOffice
PhpSpreadsheet
2026-10-22T17:38:16.098Z 2026-10-23T21:08:17.784Z
cve-2026-114613 MessagePack: Unbounded memory leak in msgpack C extens… msgpack
msgpack-python
2026-10-22T18:22:40.544Z 2026-10-23T21:08:06.271Z
cve-2026-115348 8.7 (v4.0) 7.5 (v3.1) Mistune before 3.3.0 Quadratic-Time DoS via parse_link_text lepture
mistune
2026-10-22T19:13:25.416Z 2026-10-23T21:07:57.729Z
cve-2026-115352 8.7 (v4.0) 7.5 (v3.1) Mistune before 3.3.0 Quadratic-Time DoS via Unmatched … lepture
mistune
2026-10-22T19:13:28.427Z 2026-10-23T21:07:23.519Z
cve-2026-115360 5.3 (v4.0) 4.7 (v3.1) OpenBao before 2.6.3 Open Redirect via OIDC Identity P… openbao
openbao
2026-10-22T19:13:35.435Z 2026-10-23T21:07:08.070Z
cve-2026-115506 8.7 (v4.0) 7.5 (v3.1) libexpat through 2.9.0 Denial of Service via Billion L… libexpat
libexpat
2026-10-22T19:14:06.001Z 2026-10-23T21:06:43.010Z
cve-2026-112330 8.7 (v4.0) 7.5 (v3.1) Motor.NET < 0.19.0 RabbitMQ Denial of Service via Clou… GDATASoftwareAG
motornet
2026-10-22T19:40:15.180Z 2026-10-23T21:06:22.759Z
cve-2026-115534 gedelumbung HospitalManagement Contact Form contact.ph… gedelumbung
HospitalManagement
2026-10-22T23:45:15.462Z 2026-10-23T21:06:00.059Z
cve-2026-115537 gedelumbung HospitalManagement URL Validation routing_… gedelumbung
HospitalManagement
2026-10-23T01:30:25.554Z 2026-10-23T21:05:49.579Z
cve-2026-55835 Lookyloo: Potential sub-system DoS due to parameter mi… Lookyloo
lookyloo
2026-10-23T04:14:02.867Z 2026-10-23T21:05:41.736Z
cve-2026-56833 PraisonAI Dynamic Context history and terminal tools r… MervinPraison
PraisonAI
2026-10-23T11:56:09.502Z 2026-10-23T21:05:34.632Z
cve-2026-56837 PraisonAI LinearBot processes unsigned webhooks when L… MervinPraison
PraisonAI
2026-10-23T11:57:48.068Z 2026-10-23T21:05:27.023Z
cve-2026-57849 N/A {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-23T21:01:25.342Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} N/A N/A 2026-10-23T21:01:25.342Z
cve-2026-53920 odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure openwrt
odhcpd
2026-10-23T13:20:48.045Z 2026-10-23T20:58:10.536Z
cve-2026-46346 Goobi viewer: Predictable Password Reset Token Allows … intranda
goobi-viewer-core
2026-10-23T14:14:39.197Z 2026-10-23T20:58:03.501Z
cve-2026-55222 Isar: Unprivileged user ownership of trusted repositor… ilbers
isar
2026-10-23T14:31:41.863Z 2026-10-23T20:57:39.282Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description