|
cve-2026-104894
|
|
Plane: Cross-Tenant Module Issue Linking via IDOR
|
makeplane
|
plane
|
2026-10-05T16:41:22.001Z |
2026-10-05T18:34:09.661Z |
|
cve-2026-104893
|
|
Plane: Improper validation allows arbitrary modificati…
|
makeplane
|
plane
|
2026-10-05T16:40:12.607Z |
2026-10-06T17:41:38.992Z |
|
cve-2026-12171
|
8.4 (v4.0)
7.8 (v3.1)
|
auto-changelog: code execution via untrusted in-reposi…
|
cookpete
|
auto-changelog
|
2026-10-05T16:25:19.098Z |
2026-10-05T19:04:19.152Z |
|
cve-2026-86671
|
8.4 (v4.0)
|
In Eclipse Che versions 7.29.0 and later, the GET…
|
Eclipse Foundation
|
Eclipse Che
|
2026-10-05T16:21:57.738Z |
2026-10-05T19:03:35.456Z |
|
cve-2026-102779
|
6.9 (v4.0)
|
Joomla Extension - joomlafry.com - Unauthenticated for…
|
joomlafry.com
|
TF Content for Joomla
|
2026-10-05T16:12:00.142Z |
2026-10-06T06:57:12.836Z |
|
cve-2026-102777
|
6.3 (v4.0)
|
Joomla Extension - svenbluege.de - Server-side request…
|
svenbluege.de
|
Event Gallery for Joomla
|
2026-10-05T16:11:44.089Z |
2026-10-06T06:56:56.182Z |
|
cve-2026-102426
|
5.3 (v4.0)
|
Joomla Extension - joomshaper.com - Reflected XSS in t…
|
joomshaper.com
|
SP Page Builder (Pro) extension for Joomla
|
2026-10-05T16:09:48.075Z |
2026-10-05T18:09:07.588Z |
|
cve-2026-102778
|
5.3 (v4.0)
|
Joomla Extension - svenbluege.de - Cross-site scriptin…
|
svenbluege.de
|
Event Gallery for Joomla
|
2026-10-05T16:09:09.173Z |
2026-10-06T06:54:20.983Z |
|
cve-2026-102780
|
6.9 (v4.0)
|
Joomla Extension - joomlafry.com - Unauthenticated cro…
|
joomlafry.com
|
TF Content for Joomla
|
2026-10-05T16:08:52.999Z |
2026-10-05T18:08:10.813Z |
|
cve-2026-102776
|
5.1 (v4.0)
|
Joomla Extension - svenbluege.de - Cross-site request …
|
svenbluege.de
|
Event Gallery for Joomla
|
2026-10-05T16:07:48.201Z |
2026-11-05T17:52:59.805Z |
|
cve-2026-102775
|
8.7 (v4.0)
|
Joomla Extension - phoca.cz - Authorisation bypass thr…
|
phoca.cz
|
Phoca Cart extension for Joomla
|
2026-10-05T16:06:51.228Z |
2026-10-05T18:06:07.993Z |
|
cve-2026-102428
|
9.3 (v4.0)
|
Joomla Extension - ordasoft.com - Unauthenticated SQL …
|
ordasoft.com
|
OrdaSoft Joomla CCK
|
2026-10-05T16:06:20.941Z |
2026-10-05T18:05:33.886Z |
|
cve-2026-104892
|
|
Plane: Plaintext logging of API token
|
makeplane
|
plane
|
2026-10-05T16:00:41.496Z |
2026-10-05T16:21:39.715Z |
|
cve-2026-104891
|
|
mppx-condition-gate: Free-access path grants on a self…
|
douglasborthwick-crypto
|
mppx-condition-gate
|
2026-10-05T15:55:28.731Z |
2026-10-05T19:53:16.624Z |
|
cve-2026-104890
|
|
Kunstmaan CMS: MediaBundle extension blacklist bypass …
|
Kunstmaan
|
KunstmaanBundlesCMS
|
2026-10-05T15:46:21.959Z |
2026-10-07T20:50:50.492Z |
|
cve-2026-105329
|
|
TallCMS PluginManager ThemeManager.php code injection
|
n/a
|
TallCMS
|
2026-10-05T15:15:16.262Z |
2026-10-07T20:49:18.219Z |
|
cve-2026-105397
|
5.1 (v4.0)
5.4 (v3.1)
|
LearnPress WordPress Plugin through 4.4.9.1 Stored XSS…
|
ThimPress
|
LearnPress
|
2026-10-05T15:11:23.468Z |
2026-10-07T20:48:33.216Z |
|
cve-2026-89039
|
|
Arbitrary file read via the convert_playwright_script …
|
Grafana
|
mcp-k6
|
2026-10-05T14:52:41.097Z |
2026-10-05T19:36:42.166Z |
|
cve-2026-79820
|
9 (v3.1)
|
A remote user validation failure vulnerability ex…
|
Hewlett Packard Enterprise (HPE)
|
HPE Integrated Lights-Out (iLO) 7
|
2026-10-05T14:47:04.991Z |
2026-10-05T15:19:09.406Z |
|
cve-2026-105421
|
5.3 (v3.1)
|
WordPress Kit (formerly ConvertKit) for WooCommerce pl…
|
Kit
|
Kit (formerly ConvertKit) for WooCommerce
|
2026-10-05T14:17:16.609Z |
2026-10-05T15:38:34.612Z |
|
cve-2026-92931
|
8.8 (v3.1)
|
CWE-918: Server-Side Request Forgery in the Progress S…
|
Progress Software
|
@progress/sitefinity-nextjs-sdk
|
2026-10-05T13:06:02.081Z |
2026-10-06T17:48:45.628Z |
|
cve-2026-105315
|
|
django-haystack more_like_this Template Tag elasticsea…
|
n/a
|
django-haystack
|
2026-10-05T12:45:13.446Z |
2026-10-05T13:27:19.349Z |
|
cve-2026-77805
|
7.9 (v3.1)
|
Weak Executable Signature Verification Vulnerability i…
|
Progress Software
|
Progress® Telerik® Fiddler® Classic
|
2026-10-05T12:40:57.524Z |
2026-10-05T15:26:04.778Z |
|
cve-2026-77804
|
6.6 (v3.1)
|
Time-of-check Time-of-use (TOCTOU) Race Condition in R…
|
Progress Software
|
Progress® Telerik® Fiddler® Classic
|
2026-10-05T12:40:26.811Z |
2026-10-06T17:49:23.338Z |
|
cve-2026-77803
|
3.6 (v3.1)
|
Front-end Desynchronization Vulnerability in Progress®…
|
Progress Software
|
Progress® Telerik® Fiddler® Classic
|
2026-10-05T12:39:36.806Z |
2026-10-06T17:50:34.935Z |
|
cve-2026-77802
|
6.3 (v3.1)
|
HTTP Request Smuggling Vulnerability in Progress® Tele…
|
Progress Software
|
Progress® Telerik® Fiddler® Classic
|
2026-10-05T12:38:58.912Z |
2026-10-06T17:51:15.128Z |
|
cve-2026-39783
|
4.3 (v3.1)
|
WordPress Polylang plugin <= 3.8.7 - Sensitive Data Ex…
|
WP SYNTEX
|
Polylang
|
2026-10-05T11:28:18.780Z |
2026-10-05T15:28:29.158Z |
|
cve-2026-103684
|
5.3 (v3.1)
|
WordPress WP Event Solution plugin <= 4.1.25 - Broken …
|
Arraytics
|
WP Event Solution
|
2026-10-05T11:26:23.170Z |
2026-10-05T14:55:00.213Z |
|
cve-2026-105073
|
5.3 (v3.1)
|
WordPress WP Event Solution plugin <= 4.1.25 - Sensiti…
|
Arraytics
|
WP Event Solution
|
2026-10-05T11:22:42.540Z |
2026-10-05T14:48:32.613Z |
|
cve-2026-63270
|
6.7 (v4.0)
|
Environment/ini-file leaks
|
The Document Foundation
|
LibreOffice
|
2026-10-05T11:17:24.380Z |
2026-10-05T12:40:16.322Z |