|
cve-2026-114361
|
|
HarnessRouter Identity Mode app.py improper authorization
|
n/a
|
HarnessRouter
|
2026-10-21T19:00:18.743Z |
2026-10-23T15:09:14.205Z |
|
cve-2026-114137
|
|
Django REST framework: TokenProxy.delete() reports suc…
|
encode
|
django-rest-framework
|
2026-10-21T20:06:57.790Z |
2026-10-23T15:08:55.473Z |
|
cve-2026-114145
|
|
GitPython validates a submodule's ".git" path only aft…
|
gitpython-developers
|
GitPython
|
2026-10-21T20:35:06.548Z |
2026-10-23T15:08:48.132Z |
|
cve-2026-76287
|
5.4 (v3.1)
|
Authorization Bypass in the Data Management REST API i…
|
Splunk
|
Splunk Enterprise
|
2026-10-21T22:51:49.096Z |
2026-10-23T15:08:38.358Z |
|
cve-2026-76303
|
5.7 (v3.1)
|
Stored Cross-Site Scripting (XSS) through App Document…
|
Splunk
|
Splunk SOAR
|
2026-10-21T22:52:04.809Z |
2026-10-23T15:08:29.705Z |
|
cve-2026-76307
|
7.2 (v3.1)
|
Sensitive Information Disclosure through REST API Quer…
|
Splunk
|
Splunk SOAR
|
2026-10-21T22:52:10.654Z |
2026-10-23T15:08:20.736Z |
|
cve-2026-114634
|
5.3 (v4.0)
4.3 (v3.1)
|
WWBN AVideo before 29.4.0 Blind SSRF via getHeaderCont…
|
WWBN
|
AVideo
|
2026-10-22T01:43:35.830Z |
2026-10-23T15:08:11.068Z |
|
cve-2026-114638
|
7 (v4.0)
8.7 (v3.1)
|
Traefik v3.7.0 before v3.7.14 Client CA Mix-up via aut…
|
traefik
|
traefik
|
2026-10-22T01:43:38.571Z |
2026-10-23T15:08:01.405Z |
|
cve-2026-114642
|
7 (v4.0)
8.7 (v3.1)
|
Traefik before 2.11.58 and 3.7.14 TLS Config Bypass vi…
|
traefik
|
traefik
|
2026-10-22T01:43:41.355Z |
2026-10-23T15:07:43.191Z |
|
cve-2025-60497
|
N/A
|
A segmentation violation in the GetESD function (…
|
n/a
|
n/a
|
2026-10-21T00:00:00.000Z |
2026-10-23T15:07:33.099Z |
|
cve-2025-60492
|
N/A
|
A stack overflow in the gf_bifs_dec_node function…
|
n/a
|
n/a
|
2026-10-21T00:00:00.000Z |
2026-10-23T15:07:30.908Z |
|
cve-2026-114659
|
7.1 (v4.0)
6.5 (v3.1)
|
Grav Flex Objects 1.4.0 before 1.4.17 Authorization By…
|
getgrav
|
grav-plugin-flex-objects
|
2026-10-22T01:43:44.133Z |
2026-10-23T15:07:07.168Z |
|
cve-2026-114663
|
8.6 (v4.0)
8.4 (v3.1)
|
Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Import…
|
vyperlang
|
vyper
|
2026-10-22T01:43:46.942Z |
2026-10-23T15:06:28.237Z |
|
cve-2026-115321
|
5.3 (v4.0)
4.3 (v3.1)
|
Bytebase before 3.16.0 Authorization Bypass via Update…
|
bytebase
|
bytebase
|
2026-10-22T10:57:40.982Z |
2026-10-23T15:05:29.678Z |
|
cve-2026-115325
|
8.7 (v4.0)
8.3 (v3.1)
|
Netmaker through 1.7.0 Authorization Bypass via update…
|
gravitl
|
netmaker
|
2026-10-22T10:57:43.846Z |
2026-10-23T15:05:01.043Z |
|
cve-2026-115329
|
6 (v4.0)
5.9 (v3.1)
|
Lotus through 0.10.2 Cross-Organization IDOR via Subsc…
|
uselotus
|
lotus
|
2026-10-22T10:57:46.708Z |
2026-10-23T15:04:20.467Z |
|
cve-2026-115333
|
8.2 (v4.0)
5.9 (v3.1)
|
Lotus through 0.10.2 Improper Authentication via Event…
|
uselotus
|
lotus
|
2026-10-22T10:57:49.499Z |
2026-10-23T15:03:54.486Z |
|
cve-2026-114515
|
|
OCO-Server: Self-Service Portal uninstall-job authoriz…
|
schorschii
|
OCO-Server
|
2026-10-22T14:58:02.272Z |
2026-10-23T15:03:45.075Z |
|
cve-2026-114607
|
|
better-auth: OAuth state can be used as a Magic Link t…
|
better-auth
|
better-auth
|
2026-10-22T16:47:27.480Z |
2026-10-23T15:02:40.820Z |
|
cve-2026-115356
|
5.3 (v4.0)
5.4 (v3.1)
|
OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes…
|
openbao
|
openbao
|
2026-10-22T19:13:32.611Z |
2026-10-23T15:02:35.215Z |
|
cve-2026-115364
|
2.1 (v4.0)
2.2 (v3.1)
|
OpenBao before 2.6.3 Missing Header Check on Agent/Pro…
|
openbao
|
openbao
|
2026-10-22T19:13:38.282Z |
2026-10-23T15:02:16.016Z |
|
cve-2026-115370
|
5.3 (v4.0)
4.3 (v3.1)
|
Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1…
|
lxc
|
incus
|
2026-10-22T19:13:41.181Z |
2026-10-23T15:01:52.150Z |
|
cve-2026-115374
|
7.1 (v4.0)
7.1 (v3.1)
|
Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsign…
|
lxc
|
incus
|
2026-10-22T19:13:43.999Z |
2026-10-23T15:01:34.195Z |
|
cve-2026-115378
|
6.9 (v4.0)
5.8 (v3.1)
|
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 befo…
|
lxc
|
incus
|
2026-10-22T19:13:47.035Z |
2026-10-23T15:01:16.157Z |
|
cve-2026-115382
|
5.9 (v4.0)
4.8 (v3.1)
|
Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2…
|
bytecodealliance
|
wasmtime
|
2026-10-22T19:13:49.956Z |
2026-10-23T15:01:00.837Z |
|
cve-2026-115386
|
2.1 (v4.0)
2.6 (v3.1)
|
Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.…
|
bytecodealliance
|
wasmtime
|
2026-10-22T19:13:52.931Z |
2026-10-23T15:00:52.816Z |
|
cve-2026-115390
|
6.9 (v4.0)
5.7 (v3.1)
|
Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1…
|
bytecodealliance
|
wasmtime
|
2026-10-22T19:13:55.910Z |
2026-10-23T15:00:44.401Z |
|
cve-2026-115394
|
6.8 (v4.0)
5.5 (v3.1)
|
Ghidra through 12.2 Denial of Service via BinaryField …
|
NationalSecurityAgency
|
ghidra
|
2026-10-22T19:14:00.068Z |
2026-10-23T15:00:37.926Z |
|
cve-2026-115398
|
6.8 (v4.0)
5.5 (v3.1)
|
Ghidra before 12.2 Denial of Service via TAR and ZIP F…
|
NationalSecurityAgency
|
ghidra
|
2026-10-22T19:14:03.058Z |
2026-10-23T15:00:30.147Z |
|
cve-2026-114617
|
|
Authlib: ID token can disable its own nonce validation…
|
authlib
|
authlib
|
2026-10-22T21:25:31.732Z |
2026-10-23T15:00:16.051Z |