|
cve-2026-114607
|
|
better-auth: OAuth state can be used as a Magic Link t…
|
better-auth
|
better-auth
|
2026-10-22T16:47:27.480Z |
2026-10-23T15:02:40.820Z |
|
cve-2026-115356
|
5.3 (v4.0)
5.4 (v3.1)
|
OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes…
|
openbao
|
openbao
|
2026-10-22T19:13:32.611Z |
2026-10-23T15:02:35.215Z |
|
cve-2026-115364
|
2.1 (v4.0)
2.2 (v3.1)
|
OpenBao before 2.6.3 Missing Header Check on Agent/Pro…
|
openbao
|
openbao
|
2026-10-22T19:13:38.282Z |
2026-10-23T15:02:16.016Z |
|
cve-2026-115370
|
5.3 (v4.0)
4.3 (v3.1)
|
Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1…
|
lxc
|
incus
|
2026-10-22T19:13:41.181Z |
2026-10-23T15:01:52.150Z |
|
cve-2026-115374
|
7.1 (v4.0)
7.1 (v3.1)
|
Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsign…
|
lxc
|
incus
|
2026-10-22T19:13:43.999Z |
2026-10-23T15:01:34.195Z |
|
cve-2026-115378
|
6.9 (v4.0)
5.8 (v3.1)
|
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 befo…
|
lxc
|
incus
|
2026-10-22T19:13:47.035Z |
2026-10-23T15:01:16.157Z |
|
cve-2026-115382
|
5.9 (v4.0)
4.8 (v3.1)
|
Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2…
|
bytecodealliance
|
wasmtime
|
2026-10-22T19:13:49.956Z |
2026-10-23T15:01:00.837Z |
|
cve-2026-115386
|
2.1 (v4.0)
2.6 (v3.1)
|
Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.…
|
bytecodealliance
|
wasmtime
|
2026-10-22T19:13:52.931Z |
2026-10-23T15:00:52.816Z |
|
cve-2026-115390
|
6.9 (v4.0)
5.7 (v3.1)
|
Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1…
|
bytecodealliance
|
wasmtime
|
2026-10-22T19:13:55.910Z |
2026-10-23T15:00:44.401Z |
|
cve-2026-115394
|
6.8 (v4.0)
5.5 (v3.1)
|
Ghidra through 12.2 Denial of Service via BinaryField …
|
NationalSecurityAgency
|
ghidra
|
2026-10-22T19:14:00.068Z |
2026-10-23T15:00:37.926Z |
|
cve-2026-115398
|
6.8 (v4.0)
5.5 (v3.1)
|
Ghidra before 12.2 Denial of Service via TAR and ZIP F…
|
NationalSecurityAgency
|
ghidra
|
2026-10-22T19:14:03.058Z |
2026-10-23T15:00:30.147Z |
|
cve-2026-114617
|
|
Authlib: ID token can disable its own nonce validation…
|
authlib
|
authlib
|
2026-10-22T21:25:31.732Z |
2026-10-23T15:00:16.051Z |
|
cve-2026-54615
|
|
Part-DB: Stored XSS / HTML injection in activity-log E…
|
Part-DB
|
Part-DB-server
|
2026-10-23T03:45:02.512Z |
2026-10-23T15:00:09.748Z |
|
cve-2026-86020
|
|
Part-DB: Spreadsheet Formula Injection in XLSX Part Exports
|
Part-DB
|
Part-DB-server
|
2026-10-23T04:05:24.420Z |
2026-10-23T14:59:59.159Z |
|
cve-2026-115723
|
8.3 (v4.0)
7.4 (v3.1)
|
Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and …
|
davenardella
|
snap7
|
2026-10-23T11:36:47.011Z |
2026-10-23T14:59:52.690Z |
|
cve-2026-57113
|
|
PraisonAI GitHub template cache path traversal allows …
|
MervinPraison
|
PraisonAI
|
2026-10-23T12:04:04.048Z |
2026-10-23T14:59:39.455Z |
|
cve-2026-57121
|
|
PraisonAI: Missing ownership check on DELETE endpoints…
|
MervinPraison
|
PraisonAI
|
2026-10-23T12:07:27.854Z |
2026-10-23T14:59:32.712Z |
|
cve-2026-63120
|
|
PGHoard: Incomplete Path Traversal fix in restore.py a…
|
Aiven-Open
|
pghoard
|
2026-10-23T12:16:36.584Z |
2026-10-23T14:59:26.366Z |
|
cve-2026-55889
|
|
XDG Desktop Portal: Drag-and-drop and copy-paste theft…
|
flatpak
|
xdg-desktop-portal
|
2026-10-23T12:35:05.502Z |
2026-10-23T14:59:19.599Z |
|
cve-2026-112857
|
9.8 (v3.1)
|
WordPress Reprizo theme <= 1.0.8 - PHP Object Injectio…
|
axiomthemes
|
Reprizo
|
2026-10-23T13:00:17.920Z |
2026-10-23T14:59:12.653Z |
|
cve-2026-112853
|
9.8 (v3.1)
|
WordPress Hallelujah theme <= 1.1.1 - PHP Object Injec…
|
axiomthemes
|
Hallelujah
|
2026-10-23T13:00:18.338Z |
2026-10-23T14:59:06.317Z |
|
cve-2026-112849
|
7.1 (v3.1)
|
WordPress Hostme v2 theme <= 7.0 - Cross Site Scriptin…
|
AivahThemes
|
Hostme v2
|
2026-10-23T13:00:19.660Z |
2026-10-23T14:58:45.182Z |
|
cve-2026-115749
|
4.8 (v4.0)
3.3 (v3.1)
|
hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.d…
|
hydra-ecosystem
|
hydra-ray-launcher
|
2026-10-23T13:03:32.068Z |
2026-10-23T14:58:26.781Z |
|
cve-2026-115754
|
2.3 (v4.0)
4.7 (v3.1)
|
serialize-javascript 7.0.1 before 7.1.3 XSS via unesca…
|
yahoo
|
serialize-javascript
|
2026-10-23T13:20:43.932Z |
2026-10-23T14:58:11.402Z |
|
cve-2026-115481
|
|
baserCMS: BcCustomContent file fields can be configure…
|
baserproject
|
basercms
|
2026-10-23T13:34:26.038Z |
2026-10-23T14:58:03.802Z |
|
cve-2026-57208
|
|
Entire CLI: Path traversal in checkpoint session metad…
|
entireio
|
cli
|
2026-10-23T13:37:40.983Z |
2026-10-23T14:57:55.652Z |
|
cve-2026-114623
|
|
baserCMS: Path traversal in the BcThemeFile admin scre…
|
baserproject
|
basercms
|
2026-10-23T13:45:29.675Z |
2026-10-23T14:57:47.887Z |
|
cve-2026-55459
|
|
Goobi viewer: OpenID JWT audience not enforced by the …
|
intranda
|
goobi-viewer-core
|
2026-10-23T14:16:44.995Z |
2026-10-23T14:57:39.675Z |
|
cve-2026-53942
|
|
Conda Organization Infrastructure: Pwn Request in upda…
|
conda
|
infrastructure
|
2026-10-23T14:25:00.085Z |
2026-10-23T14:57:32.991Z |
|
cve-2021-48018
|
8.3 (v4.0)
7.4 (v3.1)
|
Vyper 0.2.13 before 0.2.15 Storage Corruption via @non…
|
vyperlang
|
vyper
|
2026-10-21T00:36:18.265Z |
2026-10-23T14:57:15.214Z |