|
cve-2026-105469
|
|
girishsaraf Online-Appointment-Booking-System AJAX End…
|
girishsaraf
|
Online-Appointment-Booking-System
|
2026-10-05T22:15:17.066Z |
2026-10-06T16:29:50.781Z |
|
cve-2026-93321
|
6.9 (v4.0)
|
Malformed LLB file operation can crash buildkitd
|
moby
|
BuildKit
|
2026-10-05T22:00:54.477Z |
2026-10-06T13:25:37.712Z |
|
cve-2026-93315
|
5.8 (v4.0)
|
BuildKit proxy CA cleanup can be disrupted by build steps
|
moby
|
BuildKit
|
2026-10-05T21:57:08.053Z |
2026-10-06T13:27:23.994Z |
|
cve-2026-103433
|
6.9 (v4.0)
|
Bake filesystem entitlement consent is skipped for cer…
|
Docker
|
Docker Buildx
|
2026-10-05T21:54:44.822Z |
2026-10-06T13:36:00.334Z |
|
cve-2026-103546
|
2.3 (v4.0)
4.3 (v3.1)
|
Improper validation of Ops Manager configuration in Mo…
|
MongoDB, Inc.
|
Mongodb Controllers for Kubernetes
|
2026-10-05T21:50:14.273Z |
2026-10-06T13:36:35.154Z |
|
cve-2026-105468
|
|
girishsaraf Online-Appointment-Booking-System Login ml…
|
girishsaraf
|
Online-Appointment-Booking-System
|
2026-10-05T21:45:10.510Z |
2026-10-08T02:30:07.101Z |
|
cve-2026-105751
|
|
Docling: Arbitrary local file read via draw:image xlin…
|
docling-project
|
docling
|
2026-10-05T21:40:45.997Z |
2026-10-06T16:36:34.080Z |
|
cve-2026-105750
|
|
Docling: `enable_local_fetch` is not enforced in HTML …
|
docling-project
|
docling
|
2026-10-05T21:38:28.098Z |
2026-10-06T18:17:27.884Z |
|
cve-2026-0461
|
7.5 (v4.0)
|
Insufficient boundary validation in the USB boot …
|
AMD
|
Zynq™ UltraScale+ MPSoCs
|
2026-10-05T21:38:01.104Z |
2026-10-06T13:49:03.497Z |
|
cve-2026-105749
|
|
Docling: Unbounded table rowspan/colspan in HTML, JATS…
|
docling-project
|
docling
|
2026-10-05T21:36:53.431Z |
2026-10-08T02:29:09.184Z |
|
cve-2026-0482
|
5.4 (v4.0)
|
In AMD Versal™ Adaptive SoC devices, insufficient…
|
AMD
|
Alveo™ Accelerator Cards
|
2026-10-05T21:35:24.791Z |
2026-10-06T13:49:53.907Z |
|
cve-2026-105748
|
|
Docling: Crafted DoclingDocument JSON embeds local ima…
|
docling-project
|
docling
|
2026-10-05T21:34:25.628Z |
2026-10-06T14:17:25.343Z |
|
cve-2026-105747
|
|
Docling: METS-GBS archive member limit enforced after …
|
docling-project
|
docling
|
2026-10-05T21:32:34.438Z |
2026-10-06T14:48:33.056Z |
|
cve-2026-105746
|
|
Docling: KServe v2 OCR engine does not enforce enable_…
|
docling-project
|
docling
|
2026-10-05T21:31:12.354Z |
2026-10-06T16:40:40.755Z |
|
cve-2026-21589
|
|
This is a vulnerability in Bitbucket Data Center,…
|
Atlassian
|
Bamboo Data Center
|
2026-10-05T21:30:00.390Z |
2026-10-29T12:04:46.110Z |
|
cve-2026-91107
|
9.3 (v4.0)
|
openSIS Classic 9.3 - Insecure Direct Object Reference…
|
OS4ED
|
openSIS-Classic
|
2026-10-05T21:29:29.268Z |
2026-10-06T13:54:11.351Z |
|
cve-2026-105745
|
|
Docling: Plugin entry points are imported before the a…
|
docling-project
|
docling
|
2026-10-05T21:29:23.561Z |
2026-10-06T14:48:57.716Z |
|
cve-2026-105744
|
|
Docling: Arbitrary file read/write (and command execut…
|
docling-project
|
docling
|
2026-10-05T21:26:56.685Z |
2026-10-06T18:16:10.544Z |
|
cve-2026-105743
|
|
Docling: SSRF guard bypass in remote resource fetching…
|
docling-project
|
docling
|
2026-10-05T21:23:45.527Z |
2026-10-08T02:28:12.458Z |
|
cve-2026-105742
|
|
Docling: Configured HTTP headers sent to every remote …
|
docling-project
|
docling
|
2026-10-05T21:21:43.538Z |
2026-10-06T13:55:17.719Z |
|
cve-2026-105444
|
|
dotnet eShop Ordering API OrdersApi.cs GetOrderAsync r…
|
dotnet
|
eShop
|
2026-10-05T21:00:14.065Z |
2026-10-06T13:57:15.325Z |
|
cve-2026-105741
|
|
Langflow: IP Spoofing Bypass via `X-Forwarded-For` All…
|
langflow-ai
|
langflow
|
2026-10-05T20:56:00.060Z |
2026-10-06T16:43:02.046Z |
|
cve-2026-105740
|
|
Langflow: Authenticated RCE via MCP Stdio transport al…
|
langflow-ai
|
langflow
|
2026-10-05T20:46:18.854Z |
2026-10-06T18:20:28.495Z |
|
cve-2026-105438
|
|
O2OA General url ActionUploadExcelWithUrl server-side …
|
n/a
|
O2OA
|
2026-10-05T20:45:13.878Z |
2026-10-06T17:41:07.663Z |
|
cve-2026-105773
|
|
Canimaan Software ClamXAV local privilege escalation
|
Canimaan Software
|
ClamXAV
|
2026-10-05T20:38:55.743Z |
2026-10-26T16:46:49.379Z |
|
cve-2026-105699
|
|
Langflow: Authenticated Cross-Project File Disclosure …
|
langflow-ai
|
langflow
|
2026-10-05T20:37:59.630Z |
2026-10-08T02:26:48.618Z |
|
cve-2026-102262
|
|
Newell Brands DYMO ID parent directory open to path tr…
|
Newell Brands
|
DYMO ID
|
2026-10-05T20:37:26.019Z |
2026-10-11T17:05:29.450Z |
|
cve-2026-101893
|
|
Newell Brands DYMO ID document parsing failing file ty…
|
Newell Brands
|
DYMO ID
|
2026-10-05T20:36:21.380Z |
2026-10-11T17:05:29.573Z |
|
cve-2026-105447
|
5.5 (v3.1)
|
Quay: quay: global read-only superuser can access buil…
|
Red Hat
|
Red Hat Quay 3
|
2026-10-05T20:29:45.881Z |
2026-10-08T02:25:34.582Z |
|
cve-2026-84900
|
6.8 (v4.0)
|
HP ThinPro 8.1 SP10 and ThinPro 9 SP3 Security Updates
|
HP Inc
|
ThinPro 8.1
|
2026-10-05T20:28:48.572Z |
2026-10-06T13:57:48.597Z |