|
cve-2026-105757
|
|
vLLM: Structured-output request errors escape the requ…
|
vllm-project
|
vllm
|
2026-10-05T22:52:05.000Z |
2026-10-06T13:20:25.829Z |
|
cve-2026-105756
|
|
vLLM: Loose `cache_salt` validation lets a single requ…
|
vllm-project
|
vllm
|
2026-10-05T22:49:59.642Z |
2026-10-06T14:42:13.116Z |
|
cve-2026-105755
|
|
vLLM: Flash late-interaction scoring caches query embe…
|
vllm-project
|
vllm
|
2026-10-05T22:47:54.854Z |
2026-10-06T17:55:21.295Z |
|
cve-2026-105754
|
|
vLLM: Scale-out disaggregated multimodal transport tru…
|
vllm-project
|
vllm
|
2026-10-05T22:46:03.163Z |
2026-10-08T02:31:29.137Z |
|
cve-2026-105753
|
|
vLLM: Mirrored multimodal IPC caches desync after a re…
|
vllm-project
|
vllm
|
2026-10-05T22:37:19.633Z |
2026-10-06T13:23:03.982Z |
|
cve-2026-105752
|
|
vLLM: Harmony tool continuations drop `cache_salt` — r…
|
vllm-project
|
vllm
|
2026-10-05T22:32:59.299Z |
2026-10-06T14:48:10.692Z |
|
cve-2026-105470
|
|
girishsaraf Online-Appointment-Booking-System Doctor S…
|
girishsaraf
|
Online-Appointment-Booking-System
|
2026-10-05T22:30:14.476Z |
2026-10-06T17:40:59.768Z |
|
cve-2026-105469
|
|
girishsaraf Online-Appointment-Booking-System AJAX End…
|
girishsaraf
|
Online-Appointment-Booking-System
|
2026-10-05T22:15:17.066Z |
2026-10-06T16:29:50.781Z |
|
cve-2026-93321
|
6.9 (v4.0)
|
Malformed LLB file operation can crash buildkitd
|
moby
|
BuildKit
|
2026-10-05T22:00:54.477Z |
2026-10-06T13:25:37.712Z |
|
cve-2026-93315
|
5.8 (v4.0)
|
BuildKit proxy CA cleanup can be disrupted by build steps
|
moby
|
BuildKit
|
2026-10-05T21:57:08.053Z |
2026-10-06T13:27:23.994Z |
|
cve-2026-103433
|
6.9 (v4.0)
|
Bake filesystem entitlement consent is skipped for cer…
|
Docker
|
Docker Buildx
|
2026-10-05T21:54:44.822Z |
2026-10-06T13:36:00.334Z |
|
cve-2026-103546
|
2.3 (v4.0)
4.3 (v3.1)
|
Improper validation of Ops Manager configuration in Mo…
|
MongoDB, Inc.
|
Mongodb Controllers for Kubernetes
|
2026-10-05T21:50:14.273Z |
2026-10-06T13:36:35.154Z |
|
cve-2026-105468
|
|
girishsaraf Online-Appointment-Booking-System Login ml…
|
girishsaraf
|
Online-Appointment-Booking-System
|
2026-10-05T21:45:10.510Z |
2026-10-08T02:30:07.101Z |
|
cve-2026-105751
|
|
Docling: Arbitrary local file read via draw:image xlin…
|
docling-project
|
docling
|
2026-10-05T21:40:45.997Z |
2026-10-06T16:36:34.080Z |
|
cve-2026-105750
|
|
Docling: `enable_local_fetch` is not enforced in HTML …
|
docling-project
|
docling
|
2026-10-05T21:38:28.098Z |
2026-10-06T18:17:27.884Z |
|
cve-2026-0461
|
7.5 (v4.0)
|
Insufficient boundary validation in the USB boot …
|
AMD
|
Zynq™ UltraScale+ MPSoCs
|
2026-10-05T21:38:01.104Z |
2026-10-06T13:49:03.497Z |
|
cve-2026-105749
|
|
Docling: Unbounded table rowspan/colspan in HTML, JATS…
|
docling-project
|
docling
|
2026-10-05T21:36:53.431Z |
2026-10-08T02:29:09.184Z |
|
cve-2026-0482
|
5.4 (v4.0)
|
In AMD Versal™ Adaptive SoC devices, insufficient…
|
AMD
|
Alveo™ Accelerator Cards
|
2026-10-05T21:35:24.791Z |
2026-10-06T13:49:53.907Z |
|
cve-2026-105748
|
|
Docling: Crafted DoclingDocument JSON embeds local ima…
|
docling-project
|
docling
|
2026-10-05T21:34:25.628Z |
2026-10-06T14:17:25.343Z |
|
cve-2026-105747
|
|
Docling: METS-GBS archive member limit enforced after …
|
docling-project
|
docling
|
2026-10-05T21:32:34.438Z |
2026-10-06T14:48:33.056Z |
|
cve-2026-105746
|
|
Docling: KServe v2 OCR engine does not enforce enable_…
|
docling-project
|
docling
|
2026-10-05T21:31:12.354Z |
2026-10-06T16:40:40.755Z |
|
cve-2026-21589
|
|
This is a vulnerability in Bitbucket Data Center,…
|
Atlassian
|
Bamboo Data Center
|
2026-10-05T21:30:00.390Z |
2026-10-29T12:04:46.110Z |
|
cve-2026-91107
|
9.3 (v4.0)
|
openSIS Classic 9.3 - Insecure Direct Object Reference…
|
OS4ED
|
openSIS-Classic
|
2026-10-05T21:29:29.268Z |
2026-10-06T13:54:11.351Z |
|
cve-2026-105745
|
|
Docling: Plugin entry points are imported before the a…
|
docling-project
|
docling
|
2026-10-05T21:29:23.561Z |
2026-10-06T14:48:57.716Z |
|
cve-2026-105744
|
|
Docling: Arbitrary file read/write (and command execut…
|
docling-project
|
docling
|
2026-10-05T21:26:56.685Z |
2026-10-06T18:16:10.544Z |
|
cve-2026-105743
|
|
Docling: SSRF guard bypass in remote resource fetching…
|
docling-project
|
docling
|
2026-10-05T21:23:45.527Z |
2026-10-08T02:28:12.458Z |
|
cve-2026-105742
|
|
Docling: Configured HTTP headers sent to every remote …
|
docling-project
|
docling
|
2026-10-05T21:21:43.538Z |
2026-10-06T13:55:17.719Z |
|
cve-2026-105444
|
|
dotnet eShop Ordering API OrdersApi.cs GetOrderAsync r…
|
dotnet
|
eShop
|
2026-10-05T21:00:14.065Z |
2026-10-06T13:57:15.325Z |
|
cve-2026-105741
|
|
Langflow: IP Spoofing Bypass via `X-Forwarded-For` All…
|
langflow-ai
|
langflow
|
2026-10-05T20:56:00.060Z |
2026-10-06T16:43:02.046Z |
|
cve-2026-105740
|
|
Langflow: Authenticated RCE via MCP Stdio transport al…
|
langflow-ai
|
langflow
|
2026-10-05T20:46:18.854Z |
2026-10-06T18:20:28.495Z |