|
cve-2026-93317
|
5.9 (v4.0)
|
Container blob cache can accept unverified content
|
moby
|
BuildKit
|
2026-10-05T17:43:44.903Z |
2026-10-05T19:06:09.645Z |
|
cve-2026-104974
|
|
Plane: Disabled User Auto-Reactivation on Login
|
makeplane
|
plane
|
2026-10-05T17:42:45.210Z |
2026-10-05T19:07:53.615Z |
|
cve-2026-93316
|
7.1 (v4.0)
|
Starting daemon with --cdi-disabled flag can lead to p…
|
moby
|
BuildKit
|
2026-10-05T17:42:12.969Z |
2026-10-05T19:05:36.514Z |
|
cve-2026-104973
|
|
Plane: DNS Rebinding Bypass of CVE-2026-30242 SSRF Fix…
|
makeplane
|
plane
|
2026-10-05T17:41:33.110Z |
2026-10-07T20:54:46.744Z |
|
cve-2026-104905
|
6.1 (v4.0)
8.1 (v3.1)
|
FacturaScripts < 2026.7 PHP Object Injection via Widge…
|
NeoRazorX
|
facturascripts
|
2026-10-05T17:34:18.285Z |
2026-10-05T18:01:58.256Z |
|
cve-2026-101919
|
8.8 (v3.1)
|
Hypershift: hypershift: unsanitized kubeconfig passthr…
|
Red Hat
|
Multicluster Engine for Kubernetes
|
2026-10-05T17:33:44.331Z |
2026-10-07T20:16:09.762Z |
|
cve-2025-15643
|
7.1 (v3.1)
|
WordPress Adsmonetizer plugin <= 3.2.4 - Cross Site Sc…
|
Jose Fernandez
|
Adsmonetizer
|
2026-10-05T17:24:53.975Z |
2026-10-06T10:41:52.537Z |
|
cve-2026-78411
|
6.5 (v3.1)
|
Velociraptor Server Metadata update with Insufficient …
|
Rapid7
|
Velociraptor
|
2026-10-05T17:19:26.340Z |
2026-10-05T19:05:02.257Z |
|
cve-2026-105384
|
|
UNION HospitalManagementSystem patient_info.php sql in…
|
UNION
|
HospitalManagementSystem
|
2026-10-05T17:15:14.215Z |
2026-10-05T18:39:21.828Z |
|
cve-2026-42700
|
6.5 (v3.1)
|
WordPress Image Slider Widget plugin <= 1.1.130 - Cros…
|
GhozyLab
|
Image Slider Widget
|
2026-10-05T17:13:33.229Z |
2026-10-05T17:44:52.388Z |
|
cve-2026-104971
|
|
Plane: Cross-Workspace Asset Duplication IDOR + Worksp…
|
makeplane
|
plane
|
2026-10-05T17:04:27.821Z |
2026-10-05T18:38:43.742Z |
|
cve-2026-102576
|
4.2 (v3.1)
|
Quay: quay: dom-based cross-site scripting via unvalid…
|
Red Hat
|
Red Hat Quay 3
|
2026-10-05T17:02:51.252Z |
2026-11-01T05:13:50.103Z |
|
cve-2026-102295
|
5.4 (v3.1)
|
Quay: quay: dom-based cross-site scripting via oauth l…
|
Red Hat
|
Red Hat Quay 3
|
2026-10-05T17:02:45.778Z |
2026-11-01T05:13:48.245Z |
|
cve-2026-105383
|
|
onetwothreeneth HospitalManagementSystem controller.ph…
|
onetwothreeneth
|
HospitalManagementSystem
|
2026-10-05T17:00:14.751Z |
2026-10-06T17:41:19.435Z |
|
cve-2026-102282
|
|
adm-zip extraction preserves SUID/SGID bits from untru…
|
cthackers
|
adm-zip
|
2026-10-05T17:00:00.250Z |
2026-10-07T20:53:52.156Z |
|
cve-2026-104970
|
|
Plane: InstanceAdminSignUpEndpoint TOCTOU race allows …
|
makeplane
|
plane
|
2026-10-05T16:58:55.970Z |
2026-10-06T14:53:16.766Z |
|
cve-2026-104969
|
|
Plane: Cross-Tenant Cycle Issue Hijack via IDOR
|
makeplane
|
plane
|
2026-10-05T16:57:52.957Z |
2026-10-05T17:48:30.635Z |
|
cve-2026-104968
|
|
Plane: Cross-workspace member enumeration via /api/wor…
|
makeplane
|
plane
|
2026-10-05T16:56:50.909Z |
2026-10-05T19:05:38.700Z |
|
cve-2026-104967
|
|
Plane: Cross-workspace association destruction and iss…
|
makeplane
|
plane
|
2026-10-05T16:55:28.322Z |
2026-10-05T18:37:30.774Z |
|
cve-2026-104966
|
|
Plane: Cross-Workspace IDOR in Estimate and Comment En…
|
makeplane
|
plane
|
2026-10-05T16:54:27.158Z |
2026-10-06T17:41:25.599Z |
|
cve-2026-104965
|
|
Plane: Cross-Tenant Issue Relation Creation via IDOR
|
makeplane
|
plane
|
2026-10-05T16:53:22.219Z |
2026-10-05T17:49:49.310Z |
|
cve-2026-104964
|
|
Plane: Cross-Workspace Project Modification via Unscop…
|
makeplane
|
plane
|
2026-10-05T16:52:28.406Z |
2026-10-05T19:55:39.051Z |
|
cve-2026-78412
|
4.9 (v3.1)
|
WatchEvent API streams another organization's live events
|
Rapid7
|
Velociraptor
|
2026-10-05T16:51:34.797Z |
2026-10-05T19:04:43.517Z |
|
cve-2026-104963
|
|
Plane: Workspace cycle and module endpoints missing pr…
|
makeplane
|
plane
|
2026-10-05T16:51:25.444Z |
2026-10-07T20:53:02.037Z |
|
cve-2026-104962
|
|
Plane: Cross-project member roster IDOR in ProjectMemb…
|
makeplane
|
plane
|
2026-10-05T16:50:27.183Z |
2026-10-05T18:35:00.348Z |
|
cve-2026-104961
|
|
Plane: WorkspaceOwnerPermission missing is_active chec…
|
makeplane
|
plane
|
2026-10-05T16:49:26.834Z |
2026-10-06T17:41:32.634Z |
|
cve-2026-104960
|
|
Plane: Authorization bypass in workspace-scoped asset …
|
makeplane
|
plane
|
2026-10-05T16:48:23.793Z |
2026-10-05T17:51:34.599Z |
|
cve-2026-104956
|
|
Plane: Unauthenticated ORM field-name injection via `g…
|
makeplane
|
plane
|
2026-10-05T16:47:10.263Z |
2026-10-05T19:16:13.732Z |
|
cve-2026-105382
|
|
onetwothreeneth HospitalManagementSystem Account Admin…
|
onetwothreeneth
|
HospitalManagementSystem
|
2026-10-05T16:45:12.799Z |
2026-10-05T17:55:20.202Z |
|
cve-2026-104955
|
|
Plane: Project Member can escalate Project Guest to Me…
|
makeplane
|
plane
|
2026-10-05T16:42:25.771Z |
2026-10-07T20:52:04.227Z |