|
cve-2026-114400
|
8.2 (v4.0)
5.9 (v3.1)
|
Trudesk through 1.2.11 Missing Authentication for Tick…
|
polonel
|
trudesk
|
2026-10-21T12:39:53.511Z |
2026-10-23T18:32:44.884Z |
|
cve-2026-111633
|
8.8 (v4.0)
8.6 (v3.1)
|
ZKEACMS through 4.4 Authentication Bypass via Hard-Cod…
|
SeriaWei
|
ZKEACMS
|
2026-10-16T17:39:06.226Z |
2026-10-23T18:31:57.561Z |
|
cve-2026-19754
|
8.6 (v4.0)
|
Baserow 2.2.0 through 2.3.3 - SQL injection in formula…
|
Baserow
|
Baserow
|
2026-09-02T03:29:38.759Z |
2026-10-23T18:30:35.412Z |
|
cve-2026-109219
|
|
Mang Board - 2.4.4 - Unauthenticated Arbitrary File Up…
|
kitae-park
|
Mang Board
|
2026-10-16T04:26:58.632Z |
2026-10-23T18:28:46.339Z |
|
cve-2026-84682
|
7.7 (v4.0)
|
TDDPv2 setProductVer Command Injection in Archer AX90
|
TP-Link Systems Inc.
|
Archer AX90 v1
|
2026-10-01T18:48:42.953Z |
2026-10-23T16:43:53.663Z |
|
cve-2026-18963
|
9.1 (v3.1)
|
Keycloak-services: keycloak-services: unauthenticated …
|
Red Hat
|
Red Hat build of Keycloak 26.4
|
2026-08-18T17:05:07.478Z |
2026-10-23T16:38:40.595Z |
|
cve-2026-111648
|
5.1 (v4.0)
2.7 (v3.1)
|
BuildAdmin through 2.3.9 IDOR via routine/adminInfo/ed…
|
build-admin
|
buildadmin
|
2026-10-16T17:39:16.585Z |
2026-10-23T16:20:19.266Z |
|
cve-2026-109433
|
6 (v4.0)
6.5 (v3.1)
|
Camunda Broken Access Control via Cockpit
|
Camunda
|
Camunda 7
|
2026-10-19T15:10:59.006Z |
2026-10-23T16:16:49.778Z |
|
cve-2026-111638
|
8.3 (v4.0)
7.7 (v3.1)
|
sshportal through 1.19.5 Missing Authorization in 'key…
|
moul
|
sshportal
|
2026-10-16T17:39:09.600Z |
2026-10-23T16:11:02.880Z |
|
cve-2026-111643
|
9.3 (v4.0)
9.8 (v3.1)
|
Misaka Danmu Server through 2.8.9 Authentication Bypas…
|
l429609201
|
misaka_danmu_server
|
2026-10-16T17:39:13.043Z |
2026-10-23T16:08:12.073Z |
|
cve-2026-28330
|
4.6 (v3.1)
|
SolarWinds Observability Self-Hosted Cross-Site Script…
|
SolarWinds
|
SolarWinds Observability Self-Hosted
|
2026-10-20T16:23:19.940Z |
2026-10-23T16:04:14.841Z |
|
cve-2026-111653
|
6.9 (v4.0)
5.3 (v3.1)
|
53AIHub through 0.5.3 Missing Authentication via PUT /…
|
53AI
|
53AIHub
|
2026-10-16T17:39:20.030Z |
2026-10-23T16:02:24.828Z |
|
cve-2026-28329
|
6.4 (v3.1)
|
SolarWinds Observability Self-Hosted Server-Side Reque…
|
SolarWinds
|
SolarWinds Observability Self-Hosted
|
2026-10-20T16:22:48.111Z |
2026-10-23T16:00:53.960Z |
|
cve-2026-28328
|
8.8 (v3.1)
|
SolarWinds Observability Self-Hosted broken authorizat…
|
SolarWinds
|
SolarWinds Observability Self-Hosted
|
2026-10-20T16:17:18.712Z |
2026-10-23T15:58:55.705Z |
|
cve-2026-111658
|
5.1 (v4.0)
3.8 (v3.1)
|
SiteServer SSCMS through 7.4.0 Cross-Site Authorizatio…
|
SiteServer
|
SSCMS
|
2026-10-16T17:39:23.461Z |
2026-10-23T15:58:20.254Z |
|
cve-2026-111663
|
9.2 (v4.0)
8.6 (v3.1)
|
Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL…
|
chaskiq
|
chaskiq
|
2026-10-16T17:39:26.910Z |
2026-10-23T15:56:17.575Z |
|
cve-2026-24401
|
|
Avahi has Uncontrolled Recursion in lookup_handle_cnam…
|
avahi
|
avahi
|
2026-01-24T01:25:02.294Z |
2026-10-23T15:54:16.116Z |
|
cve-2014-125133
|
8.7 (v4.0)
7.5 (v3.1)
|
NativeChurch WordPress Theme < 1.6.2 Arbitrary File Do…
|
imithemes
|
NativeChurch
|
2026-10-20T20:31:22.824Z |
2026-10-23T15:33:12.495Z |
|
cve-2012-20003
|
5.1 (v4.0)
6.1 (v3.1)
|
Custom Tables WordPress Plugin < 3.4.6 Reflected XSS v…
|
Web Updates KMU
|
Custom Tables
|
2026-10-20T20:31:19.033Z |
2026-10-23T15:25:44.876Z |
|
cve-2015-20128
|
8.8 (v4.0)
8.2 (v3.1)
|
FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx
|
FooSun
|
DotNetCMS
|
2026-10-20T20:31:26.220Z |
2026-10-23T15:21:40.984Z |
|
cve-2016-20104
|
8.7 (v4.0)
7.5 (v3.1)
|
EyeLock nano NXT 3.05.1193 Path Traversal via logdownl…
|
EyeLock
|
nano NXT
|
2026-10-20T20:31:29.589Z |
2026-10-23T15:15:18.506Z |
|
cve-2026-113788
|
|
Lagoon core ssh service vulnerable to remote code execution
|
uselagoon
|
lagoon
|
2026-10-21T15:31:24.574Z |
2026-10-23T15:13:02.016Z |
|
cve-2026-113792
|
|
pypdf: Possible infinite loop in PdfWriter.find_outline_item
|
py-pdf
|
pypdf
|
2026-10-21T15:55:55.976Z |
2026-10-23T15:12:47.568Z |
|
cve-2026-113796
|
|
Electron: SameSite cookie restrictions are not applied…
|
electron
|
electron
|
2026-10-21T16:04:42.688Z |
2026-10-23T15:12:14.165Z |
|
cve-2026-113800
|
|
Electron: HID and USB permission checks can be attribu…
|
electron
|
electron
|
2026-10-21T16:16:45.808Z |
2026-10-23T15:12:01.887Z |
|
cve-2026-114124
|
|
Electron: Off-screen rendering on macOS trusts GPU-sup…
|
electron
|
electron
|
2026-10-21T17:03:26.765Z |
2026-10-23T15:11:35.835Z |
|
cve-2026-114128
|
|
Astro: Reflected/Stored XSS via unescaped <script>/<st…
|
withastro
|
astro
|
2026-10-21T17:32:28.466Z |
2026-10-23T15:11:02.457Z |
|
cve-2026-114132
|
|
Nuxt: Server-side route rules (`redirect`, `headers`, …
|
nuxt
|
nuxt
|
2026-10-21T17:50:11.250Z |
2026-10-23T15:10:37.684Z |
|
cve-2026-110744
|
7.2 (v3.1)
|
Multicluster-global-hub-operator-bundle: operator serv…
|
Red Hat
|
Multicluster Global Hub
|
2026-10-21T17:52:40.314Z |
2026-10-23T15:10:10.054Z |
|
cve-2026-114492
|
7 (v4.0)
6.5 (v3.1)
|
gin-vue-admin through 2.9.2 Path Traversal via removeP…
|
flipped-aurora
|
gin-vue-admin
|
2026-10-21T17:54:16.906Z |
2026-10-23T15:09:41.469Z |