|
cve-2026-105126
|
8.6 (v4.0)
7.2 (v3.1)
|
LaraDashboard before 1.4.8 Privilege Escalation via Su…
|
laradashboard
|
laradashboard
|
2026-10-03T23:39:59.775Z |
2026-10-05T20:29:34.353Z |
|
cve-2026-105125
|
6.3 (v4.0)
3.7 (v3.1)
|
LaraDashboard before 1.4.8 Path Traversal via /api/tra…
|
laradashboard
|
laradashboard
|
2026-10-03T23:39:59.168Z |
2026-10-05T16:16:44.140Z |
|
cve-2026-105124
|
5.3 (v4.0)
6.1 (v3.1)
|
W (wcms) through 3.18.0 Unauthenticated Stored XSS via…
|
vincent-peugnet
|
wcms
|
2026-10-03T22:30:13.022Z |
2026-10-06T16:51:06.737Z |
|
cve-2026-105123
|
8.7 (v4.0)
8.8 (v3.1)
|
W (wcms) through 3.18.0 RCE and Arbitrary File Write v…
|
vincent-peugnet
|
wcms
|
2026-10-03T22:30:12.394Z |
2026-10-05T14:16:25.044Z |
|
cve-2026-96451
|
8.8 (v3.1)
|
WordPress Ultimate Member plugin <= 2.13.1 - Privilege…
|
Ultimate Member
|
Ultimate Member
|
2026-10-03T15:08:13.855Z |
2026-10-05T14:55:02.194Z |
|
cve-2026-103342
|
7.1 (v3.1)
|
WordPress Unlimited Elements For Elementor (Free Widge…
|
Unlimited Elements
|
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
|
2026-10-03T14:00:11.382Z |
2026-10-03T15:12:23.526Z |
|
cve-2026-103065
|
8.2 (v3.1)
|
WordPress Kirki plugin <= 6.3.1 - Arbitrary Code Execu…
|
Themeum
|
Kirki
|
2026-10-03T14:00:11.348Z |
2026-10-09T14:15:55.689Z |
|
cve-2026-105122
|
5.3 (v4.0)
5.4 (v3.1)
|
OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri
|
OpenIdentityPlatform
|
OpenAM
|
2026-10-03T12:14:45.551Z |
2026-10-05T15:54:48.626Z |
|
cve-2026-105121
|
6.9 (v4.0)
4.9 (v3.1)
|
OpenAM before 16.1.3 Improper Authorization in Delegat…
|
OpenIdentityPlatform
|
OpenAM
|
2026-10-03T12:14:44.905Z |
2026-10-05T20:29:43.476Z |
|
cve-2026-105120
|
6.9 (v4.0)
4.9 (v3.1)
|
OpenAM before 16.1.3 Cross-Realm Session Disclosure vi…
|
OpenIdentityPlatform
|
OpenAM
|
2026-10-03T12:14:44.244Z |
2026-10-05T16:19:23.935Z |
|
cve-2026-105119
|
7.6 (v4.0)
6.8 (v3.1)
|
OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth…
|
OpenIdentityPlatform
|
OpenAM
|
2026-10-03T12:14:43.643Z |
2026-10-06T16:49:11.073Z |
|
cve-2026-105118
|
2.3 (v4.0)
4.7 (v3.1)
|
OpenAM before 16.1.3 Open Redirect via Unverified id_t…
|
OpenIdentityPlatform
|
OpenAM
|
2026-10-03T12:14:43.044Z |
2026-10-05T14:45:14.338Z |
|
cve-2026-105117
|
5.3 (v4.0)
6.1 (v3.1)
|
OpenAM before 16.1.3 Email Content Injection via Users…
|
OpenIdentityPlatform
|
OpenAM
|
2026-10-03T12:14:42.310Z |
2026-10-05T15:56:12.697Z |
|
cve-2026-105116
|
5.1 (v4.0)
6.1 (v3.1)
|
OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer …
|
OpenIdentityPlatform
|
OpenAM
|
2026-10-03T12:14:41.631Z |
2026-10-05T20:29:53.519Z |
|
cve-2026-105115
|
8.8 (v4.0)
8.6 (v3.1)
|
OpenAM before 16.1.3 Unauthenticated Arbitrary Class I…
|
OpenIdentityPlatform
|
OpenAM
|
2026-10-03T12:14:40.894Z |
2026-10-05T16:25:52.454Z |
|
cve-2026-105114
|
5.3 (v4.0)
6.1 (v3.1)
|
OpenAM before 16.1.3 Reflected XSS via OAuth2 Authoriz…
|
OpenIdentityPlatform
|
OpenAM
|
2026-10-03T12:14:39.964Z |
2026-10-06T16:48:13.318Z |
|
cve-2026-105113
|
7.1 (v4.0)
6.5 (v3.1)
|
Nezha 1.8.0 before 2.3.13 Denial of Service via Notifi…
|
nezhahq
|
nezha
|
2026-10-03T12:14:39.317Z |
2026-10-05T14:48:26.118Z |
|
cve-2026-105112
|
6 (v4.0)
5.3 (v3.1)
|
Nezha 1.8.0 before 2.3.13 Deadlock DoS via notificatio…
|
nezhahq
|
nezha
|
2026-10-03T12:14:38.663Z |
2026-10-05T15:57:12.205Z |
|
cve-2026-105105
|
9.8 (v3.1)
|
Unauthenticated ZeroMQ command/telemetry bus in AIT-Co…
|
NASA-AMMOS
|
AIT-Core
|
2026-10-03T11:55:44.853Z |
2026-10-05T17:35:59.348Z |
|
cve-2026-104983
|
|
Linux Mint Xreader PDF Attachment Saving ev-window.c g…
|
Linux Mint
|
Xreader
|
2026-10-03T10:30:12.568Z |
2026-10-05T16:30:40.939Z |
|
cve-2026-71890
|
8.7 (v4.0)
|
MLS external commit can remove an arbitrary group member
|
Legion of the Bouncy Castle Inc.
|
BC-JAVA
|
2026-10-03T08:57:00.965Z |
2026-10-05T15:58:20.685Z |
|
cve-2026-71891
|
7.1 (v4.0)
|
BLS12-381 key validation accepts a public key built on…
|
Legion of the Bouncy Castle Inc.
|
BC-JAVA
|
2026-10-03T08:56:01.050Z |
2026-10-05T15:59:26.486Z |
|
cve-2026-18040
|
5.9 (v4.0)
|
HQC leaks private key information through secret-index…
|
Legion of the Bouncy Castle Inc.
|
BC-JAVA
|
2026-10-03T08:55:06.766Z |
2026-10-05T16:00:20.062Z |
|
cve-2026-71885
|
9.2 (v4.0)
|
MLS X.509 credential not bound to the LeafNode signature key
|
Legion of the Bouncy Castle Inc.
|
BC-JAVA
|
2026-10-03T08:51:53.292Z |
2026-10-05T16:01:11.470Z |
|
cve-2026-71886
|
8.2 (v4.0)
|
OpenPGP certification accepted from a subkey without c…
|
Legion of the Bouncy Castle Inc.
|
BC-JAVA
|
2026-10-03T08:46:33.868Z |
2026-10-05T16:03:23.403Z |
|
cve-2026-71887
|
8.2 (v4.0)
|
OpenPGP data signature accepted from a signing subkey …
|
Legion of the Bouncy Castle Inc.
|
BC-JAVA
|
2026-10-03T08:39:07.997Z |
2026-10-05T16:04:21.150Z |
|
cve-2026-71883
|
8.2 (v4.0)
|
Native AES packet cipher returns the raw AES key on an alias
|
Legion of the Bouncy Castle Inc.
|
BC-LTS-JAVA
|
2026-10-03T08:38:18.749Z |
2026-10-05T16:05:53.087Z |
|
cve-2026-71888
|
8.7 (v4.0)
|
CMS AuthenticatedData exposes attacker-inserted authAt…
|
Legion of the Bouncy Castle Inc.
|
BC-JAVA
|
2026-10-03T08:36:12.960Z |
2026-10-05T16:52:07.424Z |
|
cve-2026-71889
|
8.7 (v4.0)
|
PKIXCertPathReviewer does not apply X.509 name constra…
|
Legion of the Bouncy Castle Inc.
|
BC-JAVA
|
2026-10-03T08:31:01.178Z |
2026-10-05T16:57:32.912Z |
|
cve-2026-71892
|
6.9 (v4.0)
|
CMS key-transport recipient key-size validation never …
|
Legion of the Bouncy Castle Inc.
|
BC-JAVA
|
2026-10-03T08:30:26.982Z |
2026-10-05T16:58:40.411Z |