|
cve-2026-105677
|
|
Ghost: Remote Code Execution via Theme Translation Files
|
TryGhost
|
Ghost
|
2026-10-05T19:18:41.926Z |
2026-10-06T13:40:05.658Z |
|
cve-2026-105676
|
|
Ghost: Path Traversal via Locale Setting
|
TryGhost
|
Ghost
|
2026-10-05T19:16:20.623Z |
2026-10-06T14:51:26.864Z |
|
cve-2026-105388
|
|
feelec-yishu feelcrm-os Member Endpoint MemberControll…
|
feelec-yishu
|
feelcrm-os
|
2026-10-05T19:15:14.166Z |
2026-10-06T13:39:20.160Z |
|
cve-2026-104029
|
3.3 (v3.1)
|
Sssd: sssd: denial of service via out-of-bounds read i…
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-10-05T19:13:50.965Z |
2026-11-06T17:45:09.295Z |
|
cve-2026-105675
|
|
Ghost: Invite Token Disclosure in Ghost Admin API
|
TryGhost
|
Ghost
|
2026-10-05T19:13:43.065Z |
2026-10-06T16:52:41.248Z |
|
cve-2026-105652
|
|
Ghost: Password Hash Ordering Disclosure in Ghost Admin API
|
TryGhost
|
Ghost
|
2026-10-05T19:11:52.597Z |
2026-10-05T19:54:24.255Z |
|
cve-2026-105651
|
|
Ghost: Stored XSS via Bookmark Card Images
|
TryGhost
|
Ghost
|
2026-10-05T19:09:44.638Z |
2026-10-07T21:43:14.276Z |
|
cve-2026-105650
|
|
Ghost: Stored XSS via oEmbed Photo Responses
|
TryGhost
|
Ghost
|
2026-10-05T19:07:50.271Z |
2026-10-06T13:38:33.897Z |
|
cve-2026-104030
|
5.5 (v3.1)
|
Sssd: sssd: denial of service via out-of-bounds read d…
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-10-05T19:07:33.481Z |
2026-11-05T15:52:28.076Z |
|
cve-2026-71299
|
6.5 (v3.1)
|
Maestro: maestro: rest api write endpoints registered …
|
Red Hat
|
Multicluster Engine for Kubernetes
|
2026-10-05T19:06:52.146Z |
2026-10-07T20:13:41.092Z |
|
cve-2026-71298
|
6.4 (v3.1)
|
Maestro: sql identifier injection via properties.* sea…
|
Red Hat
|
Multicluster Engine for Kubernetes
|
2026-10-05T19:06:46.972Z |
2026-10-06T16:53:28.584Z |
|
cve-2026-105649
|
|
Ghost: Stored XSS via SVG Uploads Bypassing Sanitization
|
TryGhost
|
Ghost
|
2026-10-05T19:05:37.839Z |
2026-10-06T14:51:50.796Z |
|
cve-2026-105648
|
|
Ghost: Private IP Filtering Bypass via IPv6 Transition…
|
TryGhost
|
Ghost
|
2026-10-05T19:03:16.953Z |
2026-10-06T16:54:19.500Z |
|
cve-2026-105647
|
|
Ghost: Server-Side Request Forgery in Bookmark Fetching
|
TryGhost
|
Ghost
|
2026-10-05T19:01:20.746Z |
2026-10-05T19:52:13.593Z |
|
cve-2026-103066
|
8.5 (v3.1)
|
WordPress WP BASE Booking plugin <= 6.4.0 - SQL Inject…
|
WP BASE
|
WP BASE Booking
|
2026-10-05T19:00:11.467Z |
2026-10-06T10:41:50.315Z |
|
cve-2026-100506
|
7.2 (v3.1)
|
WordPress WP Spell Check plugin <= 12.1 - PHP Object I…
|
WP Spell Check
|
WP Spell Check
|
2026-10-05T19:00:11.321Z |
2026-10-06T10:41:50.448Z |
|
cve-2026-100511
|
8.8 (v3.1)
|
WordPress VK Google Job Posting Manager plugin <= 1.3.…
|
Vektor Inc.
|
VK Google Job Posting Manager
|
2026-10-05T19:00:11.317Z |
2026-10-06T10:41:50.582Z |
|
cve-2026-97257
|
8.8 (v3.1)
|
WordPress Simple Event Planner plugin <= 1.5.7 - PHP O…
|
PressTigers
|
Simple Event Planner
|
2026-10-05T19:00:11.048Z |
2026-10-06T10:41:50.714Z |
|
cve-2026-93617
|
7.2 (v3.1)
|
WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Ob…
|
WP Sunshine
|
Sunshine Photo Cart
|
2026-10-05T19:00:10.929Z |
2026-10-06T10:41:50.839Z |
|
cve-2026-103348
|
7.2 (v3.1)
|
WordPress WP Ultimate Exporter plugin <= 3.0 - PHP Obj…
|
Smackcoders Inc.
|
WP Ultimate Exporter
|
2026-10-05T19:00:10.897Z |
2026-10-06T10:41:50.968Z |
|
cve-2026-103337
|
6.5 (v3.1)
|
WordPress WC Ukraine Shipping plugin <= 1.23.2 - Broke…
|
Kirillbdev
|
WC Ukraine Shipping
|
2026-10-05T19:00:10.084Z |
2026-10-06T10:41:51.102Z |
|
cve-2026-105326
|
2.5 (v3.1)
|
Cups: cups: argument injection in mailto notifier via …
|
Red Hat
|
Red Hat Hardened Images
|
2026-10-05T18:58:56.161Z |
2026-11-06T17:45:23.850Z |
|
cve-2026-105646
|
|
Ghost: Regular Expression Denial of Service in Content…
|
TryGhost
|
Ghost
|
2026-10-05T18:58:26.224Z |
2026-10-07T21:41:48.865Z |
|
cve-2026-105645
|
|
Ghost: Regular Expression Denial of Service in Externa…
|
TryGhost
|
Ghost
|
2026-10-05T18:56:02.471Z |
2026-10-05T19:08:46.517Z |
|
cve-2026-105712
|
3.6 (v3.1)
|
gpgtar in GnuPG before 2.5.19 can allow file over…
|
GnuPG
|
GnuPG
|
2026-10-05T18:53:09.873Z |
2026-10-05T19:09:30.980Z |
|
cve-2026-105644
|
|
Ghost: Stored XSS via SVG Files in Content Imports
|
TryGhost
|
Ghost
|
2026-10-05T18:53:08.624Z |
2026-10-06T14:52:36.497Z |
|
cve-2026-105643
|
|
Ghost: Stored XSS via Embed Card Previews
|
TryGhost
|
Ghost
|
2026-10-05T18:48:31.778Z |
2026-10-06T16:55:44.069Z |
|
cve-2026-105387
|
|
girishsaraf Online-Appointment-Booking-System Patient …
|
girishsaraf
|
Online-Appointment-Booking-System
|
2026-10-05T18:45:06.836Z |
2026-10-06T17:41:13.415Z |
|
cve-2026-28648
|
N/A
|
In Settings, there is a possible permission bypas…
|
Google
|
Android
|
2026-10-05T18:39:22.949Z |
2026-10-06T13:05:40.016Z |
|
cve-2026-28647
|
N/A
|
In updateState of DeviceAdminAppsPreferenceContro…
|
Google
|
Android
|
2026-10-05T18:39:21.941Z |
2026-10-06T13:06:16.719Z |