|
cve-2026-111765
|
|
A2A Java SDK: Android synchronous POST forwards creden…
|
a2aproject
|
a2a-java
|
2026-10-20T15:10:51.321Z |
2026-10-22T21:32:18.921Z |
|
cve-2026-111761
|
|
A2A Java SDK has Server-Side Request Forgery (SSRF) in…
|
a2aproject
|
a2a-java
|
2026-10-20T14:54:46.950Z |
2026-10-22T21:30:39.670Z |
|
cve-2026-112940
|
|
filelock ReadWriteLock: SQLite reopens the lock databa…
|
tox-dev
|
filelock
|
2026-10-20T14:41:49.555Z |
2026-10-22T21:29:27.209Z |
|
cve-2026-112934
|
|
filelock: SoftReadWriteLock holder refresh writes thro…
|
tox-dev
|
filelock
|
2026-10-20T14:30:43.736Z |
2026-10-22T21:28:27.242Z |
|
cve-2026-113411
|
|
Nerimity Desktop Window Open mainWindow.js shell.openE…
|
Nerimity
|
Desktop
|
2026-10-20T14:30:19.695Z |
2026-10-22T21:27:16.027Z |
|
cve-2026-112909
|
|
filelock: UnixFileLock truncates and chmods any regula…
|
tox-dev
|
filelock
|
2026-10-20T14:16:02.317Z |
2026-10-22T21:25:25.906Z |
|
cve-2026-113394
|
|
DrayTek Vigor2960 mainfunction.cgi setSWMProfile path …
|
DrayTek
|
Vigor2960
|
2026-10-20T13:30:14.054Z |
2026-10-22T21:24:18.507Z |
|
cve-2026-113390
|
|
DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os co…
|
DrayTek
|
Vigor2960
|
2026-10-20T12:30:17.628Z |
2026-10-22T21:23:26.169Z |
|
cve-2026-113384
|
|
Optimal IdM OptimalCloud social redirect
|
Optimal IdM
|
OptimalCloud
|
2026-10-20T11:00:12.874Z |
2026-10-22T21:20:39.735Z |
|
cve-2026-113354
|
7.1 (v4.0)
6.5 (v3.1)
|
Dockhand before 1.0.46 Arbitrary File Read via /api/sy…
|
Finsys
|
dockhand
|
2026-10-20T10:41:39.517Z |
2026-10-22T21:19:59.100Z |
|
cve-2026-113349
|
5.3 (v4.0)
4.3 (v3.1)
|
OpenCATS before 0.10.0 Missing Authorization in Calend…
|
opencats
|
OpenCATS
|
2026-10-20T10:41:36.105Z |
2026-10-22T21:19:07.705Z |
|
cve-2026-112783
|
5.3 (v4.0)
4.3 (v3.1)
|
OpenCATS before 0.10.0 Missing Authorization via Activ…
|
opencats
|
OpenCATS
|
2026-10-20T10:41:32.643Z |
2026-10-22T21:18:06.358Z |
|
cve-2026-4633
|
3.7 (v3.1)
|
Keycloak: keycloak: user enumeration via differential …
|
Red Hat
|
Red Hat build of Keycloak 26.4.12
|
2026-03-23T10:53:35.655Z |
2026-10-22T21:17:24.442Z |
|
cve-2026-0976
|
3.7 (v3.1)
|
Org.keycloak/keycloak-quarkus-server: keycloak: proxy …
|
Red Hat
|
Red Hat build of Keycloak 26.4.9
|
2026-01-15T12:06:21.251Z |
2026-10-22T21:17:19.726Z |
|
cve-2026-113386
|
7.1 (v3.1)
|
Roundcube Webmail before 1.6.20 and 1.7.x before …
|
Roundcube
|
Webmail
|
2026-10-20T04:53:46.220Z |
2026-10-22T21:17:14.176Z |
|
cve-2026-109440
|
8.7 (v4.0)
8.8 (v3.1)
|
LangAlpha through 2026.09.07 Indirect Prompt Injection…
|
ginlix-ai
|
LangAlpha
|
2026-10-20T00:46:05.334Z |
2026-10-22T21:16:20.124Z |
|
cve-2025-36252
|
6.3 (v3.1)
|
TS4500 Tape Library Insufficient Session Expiration
|
IBM
|
Storage TS4500 Library
|
2026-10-19T22:50:46.164Z |
2026-10-22T21:15:40.159Z |
|
cve-2026-112370
|
|
H3C Magic NX15 usrlist sub_416874 os command injection
|
H3C
|
Magic NX15
|
2026-10-19T22:15:15.054Z |
2026-10-22T21:15:05.627Z |
|
cve-2026-112897
|
|
Pillow: TiffDecode returns uninitialized memory as pix…
|
python-pillow
|
Pillow
|
2026-10-19T22:00:52.749Z |
2026-10-22T21:13:16.428Z |
|
cve-2024-28835
|
5 (v3.1)
|
Gnutls: potential crash during chain building/verification
|
|
|
2024-03-21T06:13:26.916Z |
2026-10-22T21:13:16.214Z |
|
cve-2024-28834
|
5.3 (v3.1)
|
Gnutls: vulnerable to minerva side-channel information leak
|
|
|
2024-03-21T13:29:11.532Z |
2026-10-22T21:13:13.722Z |
|
cve-2026-112892
|
|
Pillow: MSP RLE decoder expands a tiny file into unbou…
|
python-pillow
|
Pillow
|
2026-10-19T21:35:25.797Z |
2026-10-22T21:11:24.689Z |
|
cve-2026-109444
|
9.3 (v4.0)
9.8 (v3.1)
|
OpenSRE through 0.1.2026.10.19 Approval Gate Bypass vi…
|
Tracer-Cloud
|
opensre
|
2026-10-20T00:46:07.986Z |
2026-10-22T21:10:29.956Z |
|
cve-2026-77930
|
9.3 (v4.0)
9.8 (v3.1)
|
EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass …
|
EvoScientist
|
EvoScientist
|
2026-10-20T00:46:10.763Z |
2026-10-22T21:09:21.545Z |
|
cve-2026-112403
|
|
Pillow: Heap buffer overflow in ImagingJpegDecode
|
python-pillow
|
Pillow
|
2026-10-19T21:22:21.077Z |
2026-10-22T21:08:58.141Z |
|
cve-2026-112398
|
|
Pillow: Heap buffer overflow in FlashPix (FPX) JPEG de…
|
python-pillow
|
Pillow
|
2026-10-19T21:07:25.229Z |
2026-10-22T21:06:17.285Z |
|
cve-2026-112302
|
|
kiwilan php-archive Extraction ArchiveZip.php extract …
|
kiwilan
|
php-archive
|
2026-10-19T21:00:23.649Z |
2026-10-22T21:05:07.719Z |
|
cve-2026-109443
|
8.7 (v4.0)
8.8 (v3.1)
|
JoySafeter through 1.0.0 Authenticated RCE via Copilot…
|
jd-opensource
|
JoySafeter
|
2026-10-20T00:46:07.343Z |
2026-10-22T21:04:54.787Z |
|
cve-2026-112394
|
|
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes p…
|
python-pillow
|
Pillow
|
2026-10-19T20:48:28.141Z |
2026-10-22T21:04:15.766Z |
|
cve-2026-112297
|
|
ptbsare anx-calibre-manager LLM Configuration llm.py L…
|
ptbsare
|
anx-calibre-manager
|
2026-10-19T19:45:05.618Z |
2026-10-22T21:03:05.179Z |