|
cve-2026-63270
|
6.7 (v4.0)
|
Environment/ini-file leaks
|
The Document Foundation
|
LibreOffice
|
2026-10-05T11:17:24.380Z |
2026-10-05T12:40:16.322Z |
|
cve-2026-63269
|
6.7 (v4.0)
|
LFI and GET SSRF via GStreamer and HLS playlists
|
The Document Foundation
|
LibreOffice
|
2026-10-05T11:17:23.640Z |
2026-10-05T12:40:50.818Z |
|
cve-2026-63268
|
6.7 (v4.0)
|
LFI via calcext:data-mappings, sql provider and sdbc:f…
|
The Document Foundation
|
LibreOffice
|
2026-10-05T11:17:22.914Z |
2026-10-05T12:41:12.577Z |
|
cve-2026-63267
|
6.7 (v4.0)
|
LFI and GET SSRF via calcext:data-mappings and csv provider
|
The Document Foundation
|
LibreOffice
|
2026-10-05T11:17:22.209Z |
2026-10-05T12:42:18.571Z |
|
cve-2026-63266
|
6.8 (v4.0)
|
Arbitrary file write via calcext:data-mappings, sql pr…
|
The Document Foundation
|
LibreOffice
|
2026-10-05T11:17:21.513Z |
2026-10-05T12:42:53.493Z |
|
cve-2026-63277
|
8.5 (v4.0)
|
RCE via calcext:data-mappings, sql provider and jdbc c…
|
The Document Foundation
|
LibreOffice
|
2026-10-05T11:17:20.739Z |
2026-10-05T12:43:43.032Z |
|
cve-2026-105307
|
|
Casdoor API Endpoint authz_filter.go ApiFilter missing…
|
n/a
|
Casdoor
|
2026-10-05T11:15:11.014Z |
2026-10-05T15:28:37.748Z |
|
cve-2026-105396
|
5.3 (v4.0)
5.4 (v3.1)
|
Heym before v0.0.112 HITL Review Token Leak via Spoofa…
|
heymrun
|
heym
|
2026-10-05T11:09:45.174Z |
2026-10-05T14:13:10.868Z |
|
cve-2026-94669
|
5.3 (v3.1)
|
WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.1…
|
WP ManageNinja LLC
|
Fluent Forms Pro Add On Pack
|
2026-10-05T10:49:05.171Z |
2026-10-05T11:22:42.637Z |
|
cve-2026-105291
|
|
feelec-yishu feelcrm-os Department Search Endpoint Gro…
|
feelec-yishu
|
feelcrm-os
|
2026-10-05T10:45:11.648Z |
2026-10-05T11:00:21.446Z |
|
cve-2026-105290
|
|
feelec-yishu feelcrm-os getCurlData Endpoint GoogleCon…
|
feelec-yishu
|
feelcrm-os
|
2026-10-05T10:30:15.436Z |
2026-10-07T20:47:56.085Z |
|
cve-2026-59788
|
5.6 (v4.0)
|
Stored XSS vulnerability in OAuth configuration form
|
Zabbix
|
Zabbix
|
2026-10-05T10:29:43.438Z |
2026-10-05T11:23:05.997Z |
|
cve-2026-59787
|
5.3 (v4.0)
|
SNMP trap injection in zabbix_trap_receiver.pl
|
Zabbix
|
Zabbix
|
2026-10-05T10:29:20.302Z |
2026-10-05T11:23:32.622Z |
|
cve-2026-59786
|
6.9 (v4.0)
|
Active agent heartbeat missing TLS check
|
Zabbix
|
Zabbix
|
2026-10-05T10:29:01.810Z |
2026-10-05T11:25:27.518Z |
|
cve-2026-59785
|
5.1 (v4.0)
|
Hidden host credentials inferable via multiselect.get …
|
Zabbix
|
Zabbix
|
2026-10-05T10:28:30.248Z |
2026-10-05T11:43:32.737Z |
|
cve-2026-59783
|
2.3 (v4.0)
|
Server DoS via binary items
|
Zabbix
|
Zabbix
|
2026-10-05T10:28:09.917Z |
2026-10-05T11:50:08.690Z |
|
cve-2026-59782
|
6.9 (v4.0)
|
JavaScript preprocessing memory disclosure
|
Zabbix
|
Zabbix
|
2026-10-05T10:27:34.672Z |
2026-10-05T11:53:36.626Z |
|
cve-2026-39763
|
4.3 (v3.1)
|
WordPress WP Dummy Content Generator plugin <= 4.0.0 -…
|
Deepak Anand
|
WP Dummy Content Generator
|
2026-10-05T10:23:12.204Z |
2026-10-05T12:45:02.991Z |
|
cve-2026-105289
|
|
feelec-yishu feelcrm-os Create Customer Endpoint CrmDe…
|
feelec-yishu
|
feelcrm-os
|
2026-10-05T10:15:16.633Z |
2026-10-05T12:45:46.293Z |
|
cve-2026-105288
|
|
feelec-yishu feelcrm-os Crm Endpoint functions.php ind…
|
feelec-yishu
|
feelcrm-os
|
2026-10-05T10:00:10.985Z |
2026-10-05T15:28:45.728Z |
|
cve-2026-105287
|
|
feelec-yishu feelcrm-os getMemberByGroups Endpoint Aja…
|
feelec-yishu
|
feelcrm-os
|
2026-10-05T09:45:12.747Z |
2026-10-05T11:56:26.390Z |
|
cve-2026-105286
|
|
Totolink A3002MU File Upload formUploadFile sub_44B250…
|
Totolink
|
A3002MU
|
2026-10-05T09:30:17.989Z |
2026-10-07T20:46:59.101Z |
|
cve-2026-19395
|
6.6 (v4.0)
|
An empty <img> attribute value in styled text triggers…
|
qt
|
Qt for MCUs
|
2026-10-05T09:18:28.379Z |
2026-10-05T12:04:27.598Z |
|
cve-2026-105285
|
|
Totolink A3002MU QoS Rule formIpQoS stack-based overflow
|
Totolink
|
A3002MU
|
2026-10-05T09:15:15.881Z |
2026-10-05T12:46:46.181Z |
|
cve-2026-39721
|
5.4 (v3.1)
|
WordPress Starter Templates plugin <= 4.7.7 - Broken A…
|
Brainstorm Force
|
Starter Templates
|
2026-10-05T09:01:20.344Z |
2026-10-05T15:28:52.287Z |
|
cve-2026-105284
|
|
Totolink A3002MU Authentication Check boa sub_40FCFC i…
|
Totolink
|
A3002MU
|
2026-10-05T09:00:13.775Z |
2026-10-05T15:29:02.936Z |
|
cve-2026-105064
|
6.5 (v3.1)
|
WordPress Unlimited Elements For Elementor (Free Widge…
|
Unlimited Elements
|
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
|
2026-10-05T08:59:15.782Z |
2026-10-05T14:55:00.384Z |
|
cve-2026-103351
|
5.3 (v3.1)
|
WordPress Taxi Booking Manager for WooCommerce plugin …
|
Magepeople inc.
|
Taxi Booking Manager for WooCommerce
|
2026-10-05T08:58:21.432Z |
2026-10-05T12:49:49.460Z |
|
cve-2026-104389
|
8.5 (v3.1)
|
WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability
|
Sirv
|
Sirv
|
2026-10-05T08:57:16.886Z |
2026-10-06T10:41:52.659Z |
|
cve-2026-104388
|
5.3 (v3.1)
|
WordPress PowerPress Podcasting plugin <= 11.17.9 - Se…
|
Blubrry Podcasting
|
PowerPress Podcasting
|
2026-10-05T08:56:48.249Z |
2026-10-05T12:12:48.342Z |