|
cve-2026-105164
|
|
NASA cFS cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-…
|
NASA
|
cFS
|
2026-10-04T22:00:13.811Z |
2026-10-25T06:42:36.843Z |
|
cve-2026-105163
|
|
crossplane crossplane-runtime ImageConfig client.go Ge…
|
crossplane
|
crossplane-runtime
|
2026-10-04T21:30:12.785Z |
2026-10-05T15:11:53.371Z |
|
cve-2026-105219
|
8.7 (v4.0)
7.5 (v3.1)
|
Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser
|
mwilliamson
|
mammoth.js
|
2026-10-04T17:09:54.186Z |
2026-10-05T14:55:01.763Z |
|
cve-2026-105218
|
9.1 (v4.0)
7.4 (v3.1)
|
gopay before 1.5.119 Disabled TLS Certificate Verifica…
|
go-pay
|
gopay
|
2026-10-04T17:09:53.573Z |
2026-10-05T14:55:01.904Z |
|
cve-2026-105217
|
2.3 (v4.0)
3.1 (v3.1)
|
Cockpit CMS 2.12.0 before 2.14.1 Disabled TLS Verifica…
|
cockpit-hq
|
cockpit
|
2026-10-04T17:09:52.997Z |
2026-10-05T13:16:36.168Z |
|
cve-2026-105216
|
9.1 (v4.0)
7.4 (v3.1)
|
go-micro before 6.0.0 Disabled TLS Certificate Verific…
|
micro
|
go-micro
|
2026-10-04T17:09:52.327Z |
2026-10-27T01:30:38.154Z |
|
cve-2026-105161
|
|
invariant-systems-ai aiir Policy Gate signature verification
|
invariant-systems-ai
|
aiir
|
2026-10-04T16:30:10.216Z |
2026-10-06T22:02:32.018Z |
|
cve-2026-105086
|
9.3 (v4.0)
8.7 (v3.1)
|
WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-…
|
WWBN
|
AVideo
|
2026-10-04T15:10:23.281Z |
2026-10-05T14:04:18.167Z |
|
cve-2026-104402
|
4.3 (v3.1)
|
WordPress Mindio Magic MCP plugin <= 0.5.6 - Sensitive…
|
farvisun
|
Mindio Magic MCP
|
2026-10-04T15:08:43.541Z |
2026-10-05T13:15:54.663Z |
|
cve-2026-105224
|
5.1 (v4.0)
5.4 (v3.1)
|
YesWiki before 4.6.7 Stored XSS via Bazar valeur Action
|
YesWiki
|
yeswiki
|
2026-10-04T15:04:53.749Z |
2026-10-05T15:36:29.374Z |
|
cve-2026-105089
|
9.3 (v4.0)
8.7 (v3.1)
|
WWBN AVideo through 29.2.0 Stored XSS via trailer1 in …
|
WWBN
|
AVideo
|
2026-10-04T15:04:53.050Z |
2026-10-06T21:59:59.901Z |
|
cve-2026-105158
|
|
RainyGao DocSys Database Management BaseController.jav…
|
RainyGao
|
DocSys
|
2026-10-04T13:15:22.742Z |
2026-10-05T13:27:58.858Z |
|
cve-2026-105215
|
9.3 (v4.0)
9.1 (v3.1)
|
ZITADEL before 4.16.2 Account Pre-Hijacking via Forged…
|
zitadel
|
zitadel
|
2026-10-04T13:10:07.389Z |
2026-10-29T21:15:34.442Z |
|
cve-2026-105214
|
2.3 (v4.0)
|
Zitadel before 4.16.2 SSRF via Organization Domain HTT…
|
zitadel
|
zitadel
|
2026-10-04T13:10:06.642Z |
2026-10-05T20:29:06.887Z |
|
cve-2026-105213
|
8.8 (v4.0)
8.2 (v3.1)
|
ZITADEL before 4.17.1 Authentication Bypass via Login …
|
zitadel
|
zitadel
|
2026-10-04T13:10:05.815Z |
2026-10-05T15:42:12.210Z |
|
cve-2026-105212
|
8.7 (v4.0)
7.5 (v3.1)
|
ZITADEL before 3.4.14 and 4.16.2 Account Takeover via …
|
zitadel
|
zitadel
|
2026-10-04T13:10:05.215Z |
2026-10-29T21:15:33.747Z |
|
cve-2026-105211
|
9.2 (v4.0)
8.1 (v3.1)
|
ZITADEL before 4.17.1 Authentication Bypass via Login …
|
zitadel
|
zitadel
|
2026-10-04T13:10:04.626Z |
2026-10-05T14:06:56.950Z |
|
cve-2026-105210
|
8.8 (v4.0)
8.2 (v3.1)
|
ZITADEL before 4.17.1 Unauthenticated MFA Enrollment v…
|
zitadel
|
zitadel
|
2026-10-04T13:10:03.949Z |
2026-10-29T21:15:33.072Z |
|
cve-2026-105209
|
9.3 (v4.0)
9.6 (v3.1)
|
ZITADEL before 3.4.15 and 4.17.1 Cross-Organization Ac…
|
zitadel
|
zitadel
|
2026-10-04T13:10:03.314Z |
2026-10-29T21:15:32.416Z |
|
cve-2026-105208
|
8.7 (v4.0)
7.7 (v3.1)
|
ZITADEL before 4.17.3 Session Hijacking via Forgeable …
|
zitadel
|
zitadel
|
2026-10-04T13:10:02.664Z |
2026-10-29T21:15:31.735Z |
|
cve-2026-105207
|
9.3 (v4.0)
9.8 (v3.1)
|
ZITADEL before 4.17.3 Account Takeover via External Id…
|
zitadel
|
zitadel
|
2026-10-04T13:10:02.024Z |
2026-10-29T21:15:31.050Z |
|
cve-2026-105206
|
5.3 (v4.0)
|
ZITADEL before 4.17.3 Cross-Organization Authenticatio…
|
zitadel
|
zitadel
|
2026-10-04T13:10:01.420Z |
2026-10-29T21:15:30.351Z |
|
cve-2026-105205
|
6.9 (v4.0)
5.3 (v3.1)
|
SiYuan before 3.8.5 Information Disclosure via /api/bl…
|
siyuan-note
|
siyuan
|
2026-10-04T13:10:00.765Z |
2026-10-05T13:30:12.526Z |
|
cve-2026-105157
|
|
RainyGao DocSys Document Controller doGetTmpFile.do Do…
|
RainyGao
|
DocSys
|
2026-10-04T12:45:23.148Z |
2026-10-05T15:31:17.705Z |
|
cve-2026-105156
|
|
YzmCMS MD5 system.func.php password weak password hash
|
n/a
|
YzmCMS
|
2026-10-04T12:30:10.845Z |
2026-10-05T15:46:16.504Z |
|
cve-2026-105149
|
|
mooSocial all-products sql injection
|
n/a
|
mooSocial
|
2026-10-04T11:45:10.385Z |
2026-10-06T21:56:16.593Z |
|
cve-2026-105148
|
|
SciPhi-AI R2R Retrieval Completion API Endpoint llm.py…
|
SciPhi-AI
|
R2R
|
2026-10-04T11:30:12.942Z |
2026-10-05T13:30:59.771Z |
|
cve-2026-105147
|
|
SciPhi-AI R2R JWT Secret hard-coded credentials
|
SciPhi-AI
|
R2R
|
2026-10-04T11:15:12.371Z |
2026-10-05T15:31:26.727Z |
|
cve-2026-105146
|
|
Comsenz Discuz! Admin Medal Moderation mod.php modmeda…
|
Comsenz
|
Discuz!
|
2026-10-04T09:30:12.188Z |
2026-10-05T15:54:15.408Z |
|
cve-2026-97307
|
7.5 (v3.1)
|
WordPress Cost Calculator Builder plugin <= 4.0.17 - S…
|
StylemixThemes
|
Cost Calculator Builder
|
2026-10-04T09:08:23.508Z |
2026-10-05T15:31:34.786Z |