|
cve-2026-113390
|
|
DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os co…
|
DrayTek
|
Vigor2960
|
2026-10-20T12:30:17.628Z |
2026-10-22T21:23:26.169Z |
|
cve-2026-113384
|
|
Optimal IdM OptimalCloud social redirect
|
Optimal IdM
|
OptimalCloud
|
2026-10-20T11:00:12.874Z |
2026-10-22T21:20:39.735Z |
|
cve-2026-113354
|
7.1 (v4.0)
6.5 (v3.1)
|
Dockhand before 1.0.46 Arbitrary File Read via /api/sy…
|
Finsys
|
dockhand
|
2026-10-20T10:41:39.517Z |
2026-10-22T21:19:59.100Z |
|
cve-2026-113349
|
5.3 (v4.0)
4.3 (v3.1)
|
OpenCATS before 0.10.0 Missing Authorization in Calend…
|
opencats
|
OpenCATS
|
2026-10-20T10:41:36.105Z |
2026-10-22T21:19:07.705Z |
|
cve-2026-112783
|
5.3 (v4.0)
4.3 (v3.1)
|
OpenCATS before 0.10.0 Missing Authorization via Activ…
|
opencats
|
OpenCATS
|
2026-10-20T10:41:32.643Z |
2026-10-22T21:18:06.358Z |
|
cve-2026-4633
|
3.7 (v3.1)
|
Keycloak: keycloak: user enumeration via differential …
|
Red Hat
|
Red Hat build of Keycloak 26.4.12
|
2026-03-23T10:53:35.655Z |
2026-10-22T21:17:24.442Z |
|
cve-2026-0976
|
3.7 (v3.1)
|
Org.keycloak/keycloak-quarkus-server: keycloak: proxy …
|
Red Hat
|
Red Hat build of Keycloak 26.4.9
|
2026-01-15T12:06:21.251Z |
2026-10-22T21:17:19.726Z |
|
cve-2026-113386
|
7.1 (v3.1)
|
Roundcube Webmail before 1.6.20 and 1.7.x before …
|
Roundcube
|
Webmail
|
2026-10-20T04:53:46.220Z |
2026-10-22T21:17:14.176Z |
|
cve-2026-109440
|
8.7 (v4.0)
8.8 (v3.1)
|
LangAlpha through 2026.09.07 Indirect Prompt Injection…
|
ginlix-ai
|
LangAlpha
|
2026-10-20T00:46:05.334Z |
2026-10-22T21:16:20.124Z |
|
cve-2025-36252
|
6.3 (v3.1)
|
TS4500 Tape Library Insufficient Session Expiration
|
IBM
|
Storage TS4500 Library
|
2026-10-19T22:50:46.164Z |
2026-10-22T21:15:40.159Z |
|
cve-2026-112370
|
|
H3C Magic NX15 usrlist sub_416874 os command injection
|
H3C
|
Magic NX15
|
2026-10-19T22:15:15.054Z |
2026-10-22T21:15:05.627Z |
|
cve-2026-112897
|
|
Pillow: TiffDecode returns uninitialized memory as pix…
|
python-pillow
|
Pillow
|
2026-10-19T22:00:52.749Z |
2026-10-22T21:13:16.428Z |
|
cve-2024-28835
|
5 (v3.1)
|
Gnutls: potential crash during chain building/verification
|
|
|
2024-03-21T06:13:26.916Z |
2026-10-22T21:13:16.214Z |
|
cve-2024-28834
|
5.3 (v3.1)
|
Gnutls: vulnerable to minerva side-channel information leak
|
|
|
2024-03-21T13:29:11.532Z |
2026-10-22T21:13:13.722Z |
|
cve-2026-112892
|
|
Pillow: MSP RLE decoder expands a tiny file into unbou…
|
python-pillow
|
Pillow
|
2026-10-19T21:35:25.797Z |
2026-10-22T21:11:24.689Z |
|
cve-2026-109444
|
9.3 (v4.0)
9.8 (v3.1)
|
OpenSRE through 0.1.2026.10.19 Approval Gate Bypass vi…
|
Tracer-Cloud
|
opensre
|
2026-10-20T00:46:07.986Z |
2026-10-22T21:10:29.956Z |
|
cve-2026-77930
|
9.3 (v4.0)
9.8 (v3.1)
|
EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass …
|
EvoScientist
|
EvoScientist
|
2026-10-20T00:46:10.763Z |
2026-10-22T21:09:21.545Z |
|
cve-2026-112403
|
|
Pillow: Heap buffer overflow in ImagingJpegDecode
|
python-pillow
|
Pillow
|
2026-10-19T21:22:21.077Z |
2026-10-22T21:08:58.141Z |
|
cve-2026-112398
|
|
Pillow: Heap buffer overflow in FlashPix (FPX) JPEG de…
|
python-pillow
|
Pillow
|
2026-10-19T21:07:25.229Z |
2026-10-22T21:06:17.285Z |
|
cve-2026-112302
|
|
kiwilan php-archive Extraction ArchiveZip.php extract …
|
kiwilan
|
php-archive
|
2026-10-19T21:00:23.649Z |
2026-10-22T21:05:07.719Z |
|
cve-2026-109443
|
8.7 (v4.0)
8.8 (v3.1)
|
JoySafeter through 1.0.0 Authenticated RCE via Copilot…
|
jd-opensource
|
JoySafeter
|
2026-10-20T00:46:07.343Z |
2026-10-22T21:04:54.787Z |
|
cve-2026-112394
|
|
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes p…
|
python-pillow
|
Pillow
|
2026-10-19T20:48:28.141Z |
2026-10-22T21:04:15.766Z |
|
cve-2026-112297
|
|
ptbsare anx-calibre-manager LLM Configuration llm.py L…
|
ptbsare
|
anx-calibre-manager
|
2026-10-19T19:45:05.618Z |
2026-10-22T21:03:05.179Z |
|
cve-2026-112780
|
9.3 (v4.0)
8.8 (v3.1)
|
Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call …
|
getgrav
|
grav
|
2026-10-19T19:10:56.708Z |
2026-10-22T21:02:32.455Z |
|
cve-2026-112775
|
8.7 (v4.0)
7.5 (v3.1)
|
Craft CMS 5.0.0 before 5.11.0 Verification Code Reuse …
|
craftcms
|
cms
|
2026-10-19T19:10:53.219Z |
2026-10-22T21:01:53.422Z |
|
cve-2026-112770
|
8.7 (v4.0)
8.8 (v3.1)
|
Craft CMS before 4.18.8 and 5.11.0 Authenticated RCE v…
|
craftcms
|
cms
|
2026-10-19T19:10:49.743Z |
2026-10-22T20:59:49.756Z |
|
cve-2026-112249
|
|
grandnode grandnode2 Product Description Product.Layou…
|
grandnode
|
grandnode2
|
2026-10-19T18:15:20.969Z |
2026-10-22T20:57:30.197Z |
|
cve-2026-11319
|
6.9 (v4.0)
6.2 (v3.1)
|
TickTick Android 8.2.2.0 Path Traversal via ShareRecei…
|
TickTick Limited
|
TickTick for Android
|
2026-10-19T17:58:54.222Z |
2026-10-22T20:56:29.624Z |
|
cve-2026-55644
|
|
Element X iOS: io.element.call deeplink allows attacke…
|
element-hq
|
element-x-ios
|
2026-10-19T17:54:58.499Z |
2026-10-22T20:55:32.146Z |
|
cve-2026-3161
|
5.9 (v3.1)
|
IBM Cloud Pak System Risky Cryptographic Algorithm
|
IBM
|
Cloud Pak System
|
2026-10-19T17:39:57.551Z |
2026-10-22T20:54:26.968Z |