|
cve-2026-115378
|
6.9 (v4.0)
5.8 (v3.1)
|
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 befo…
|
lxc
|
incus
|
2026-10-22T19:13:47.035Z |
2026-10-23T15:01:16.157Z |
|
cve-2026-115382
|
5.9 (v4.0)
4.8 (v3.1)
|
Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2…
|
bytecodealliance
|
wasmtime
|
2026-10-22T19:13:49.956Z |
2026-10-23T15:01:00.837Z |
|
cve-2026-115386
|
2.1 (v4.0)
2.6 (v3.1)
|
Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.…
|
bytecodealliance
|
wasmtime
|
2026-10-22T19:13:52.931Z |
2026-10-23T15:00:52.816Z |
|
cve-2026-115390
|
6.9 (v4.0)
5.7 (v3.1)
|
Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1…
|
bytecodealliance
|
wasmtime
|
2026-10-22T19:13:55.910Z |
2026-10-23T15:00:44.401Z |
|
cve-2026-115394
|
6.8 (v4.0)
5.5 (v3.1)
|
Ghidra through 12.2 Denial of Service via BinaryField …
|
NationalSecurityAgency
|
ghidra
|
2026-10-22T19:14:00.068Z |
2026-10-23T15:00:37.926Z |
|
cve-2026-115398
|
6.8 (v4.0)
5.5 (v3.1)
|
Ghidra before 12.2 Denial of Service via TAR and ZIP F…
|
NationalSecurityAgency
|
ghidra
|
2026-10-22T19:14:03.058Z |
2026-10-23T15:00:30.147Z |
|
cve-2026-114617
|
|
Authlib: ID token can disable its own nonce validation…
|
authlib
|
authlib
|
2026-10-22T21:25:31.732Z |
2026-10-23T15:00:16.051Z |
|
cve-2026-54615
|
|
Part-DB: Stored XSS / HTML injection in activity-log E…
|
Part-DB
|
Part-DB-server
|
2026-10-23T03:45:02.512Z |
2026-10-23T15:00:09.748Z |
|
cve-2026-86020
|
|
Part-DB: Spreadsheet Formula Injection in XLSX Part Exports
|
Part-DB
|
Part-DB-server
|
2026-10-23T04:05:24.420Z |
2026-10-23T14:59:59.159Z |
|
cve-2026-115723
|
8.3 (v4.0)
7.4 (v3.1)
|
Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and …
|
davenardella
|
snap7
|
2026-10-23T11:36:47.011Z |
2026-10-23T14:59:52.690Z |
|
cve-2026-57113
|
|
PraisonAI GitHub template cache path traversal allows …
|
MervinPraison
|
PraisonAI
|
2026-10-23T12:04:04.048Z |
2026-10-23T14:59:39.455Z |
|
cve-2026-57121
|
|
PraisonAI: Missing ownership check on DELETE endpoints…
|
MervinPraison
|
PraisonAI
|
2026-10-23T12:07:27.854Z |
2026-10-23T14:59:32.712Z |
|
cve-2026-63120
|
|
PGHoard: Incomplete Path Traversal fix in restore.py a…
|
Aiven-Open
|
pghoard
|
2026-10-23T12:16:36.584Z |
2026-10-23T14:59:26.366Z |
|
cve-2026-55889
|
|
XDG Desktop Portal: Drag-and-drop and copy-paste theft…
|
flatpak
|
xdg-desktop-portal
|
2026-10-23T12:35:05.502Z |
2026-10-23T14:59:19.599Z |
|
cve-2026-112857
|
9.8 (v3.1)
|
WordPress Reprizo theme <= 1.0.8 - PHP Object Injectio…
|
axiomthemes
|
Reprizo
|
2026-10-23T13:00:17.920Z |
2026-10-23T14:59:12.653Z |
|
cve-2026-112853
|
9.8 (v3.1)
|
WordPress Hallelujah theme <= 1.1.1 - PHP Object Injec…
|
axiomthemes
|
Hallelujah
|
2026-10-23T13:00:18.338Z |
2026-10-23T14:59:06.317Z |
|
cve-2026-112849
|
7.1 (v3.1)
|
WordPress Hostme v2 theme <= 7.0 - Cross Site Scriptin…
|
AivahThemes
|
Hostme v2
|
2026-10-23T13:00:19.660Z |
2026-10-23T14:58:45.182Z |
|
cve-2026-115749
|
4.8 (v4.0)
3.3 (v3.1)
|
hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.d…
|
hydra-ecosystem
|
hydra-ray-launcher
|
2026-10-23T13:03:32.068Z |
2026-10-23T14:58:26.781Z |
|
cve-2026-115754
|
2.3 (v4.0)
4.7 (v3.1)
|
serialize-javascript 7.0.1 before 7.1.3 XSS via unesca…
|
yahoo
|
serialize-javascript
|
2026-10-23T13:20:43.932Z |
2026-10-23T14:58:11.402Z |
|
cve-2026-115481
|
|
baserCMS: BcCustomContent file fields can be configure…
|
baserproject
|
basercms
|
2026-10-23T13:34:26.038Z |
2026-10-23T14:58:03.802Z |
|
cve-2026-57208
|
|
Entire CLI: Path traversal in checkpoint session metad…
|
entireio
|
cli
|
2026-10-23T13:37:40.983Z |
2026-10-23T14:57:55.652Z |
|
cve-2026-114623
|
|
baserCMS: Path traversal in the BcThemeFile admin scre…
|
baserproject
|
basercms
|
2026-10-23T13:45:29.675Z |
2026-10-23T14:57:47.887Z |
|
cve-2026-55459
|
|
Goobi viewer: OpenID JWT audience not enforced by the …
|
intranda
|
goobi-viewer-core
|
2026-10-23T14:16:44.995Z |
2026-10-23T14:57:39.675Z |
|
cve-2026-53942
|
|
Conda Organization Infrastructure: Pwn Request in upda…
|
conda
|
infrastructure
|
2026-10-23T14:25:00.085Z |
2026-10-23T14:57:32.991Z |
|
cve-2021-48018
|
8.3 (v4.0)
7.4 (v3.1)
|
Vyper 0.2.13 before 0.2.15 Storage Corruption via @non…
|
vyperlang
|
vyper
|
2026-10-21T00:36:18.265Z |
2026-10-23T14:57:15.214Z |
|
cve-2026-100886
|
|
Seetong T8108/T8108P/T8116/T8232 Debug Service imprope…
|
Seetong
|
T8108
|
2026-09-27T23:00:09.011Z |
2026-10-23T14:43:10.196Z |
|
cve-2026-48539
|
5.1 (v4.0)
5.4 (v3.1)
|
GFI Archiver < 15.14 Stored XSS via MailInsights.aspx
|
GFI Software
|
GFI Archiver
|
2026-07-23T15:32:59.409Z |
2026-10-23T14:11:04.939Z |
|
cve-2026-48530
|
5.1 (v4.0)
5.4 (v3.1)
|
GFI Archiver < 15.14 Stored XSS via CategorizationPoli…
|
GFI Software
|
GFI Archiver
|
2026-07-23T15:23:16.097Z |
2026-10-23T14:09:57.681Z |
|
cve-2026-111668
|
5.3 (v4.0)
5.4 (v3.1)
|
AIHelms through 0.1.25 Missing Authorization in Effici…
|
beizhu-1209
|
AIHelms
|
2026-10-16T17:39:30.328Z |
2026-10-23T14:07:02.761Z |
|
cve-2026-111678
|
4.8 (v4.0)
3.3 (v3.1)
|
Antiword through 0.37 Stack Out-of-Bounds Read via pro…
|
Adri van Os
|
antiword
|
2026-10-16T17:39:37.367Z |
2026-10-23T14:03:28.591Z |