|
cve-2026-93474
|
6.5 (v3.1)
6.9 (v4.0)
|
Monta monta.app Insufficiently Protected Credentials
|
Monta
|
monta.app
|
2026-10-02T21:27:59.493Z |
2026-10-03T15:52:54.945Z |
|
cve-2026-104055
|
5.3 (v4.0)
|
Monitoring-user password logged in cleartext by postgr…
|
Canonical
|
postgresql-operator
|
2026-10-02T20:35:50.514Z |
2026-10-03T15:52:55.087Z |
|
cve-2026-75937
|
9.4 (v4.0)
|
OS Command Injection in Digi Accelerated Linux (DAL OS)
|
Digi International
|
IX Family
|
2026-10-02T20:33:56.823Z |
2026-10-03T15:52:55.213Z |
|
cve-2026-82045
|
7.1 (v4.0)
6.5 (v3.1)
|
UTMStack < 11.2.16 JPQL Injection via searchPropertyValues
|
UTMStack
|
UTMStack
|
2026-10-02T20:21:51.999Z |
2026-10-05T20:30:21.937Z |
|
cve-2026-104874
|
|
Multidict: Reference leak in CIMultiDict/MultiDict ite…
|
aio-libs
|
multidict
|
2026-10-02T20:21:50.903Z |
2026-10-05T16:25:56.621Z |
|
cve-2026-82044
|
6.3 (v4.0)
7.7 (v3.1)
|
UTMStack < 11.2.16 Server-Side Request Forgery via dow…
|
UTMStack
|
UTMStack
|
2026-10-02T20:20:47.694Z |
2026-10-05T17:13:42.524Z |
|
cve-2026-82043
|
6.9 (v4.0)
5.3 (v3.1)
|
UTMStack < 11.2.16 Account Enumeration via Password Re…
|
UTMStack
|
UTMStack
|
2026-10-02T20:17:20.012Z |
2026-10-06T16:41:53.278Z |
|
cve-2026-82042
|
9.3 (v4.0)
9.8 (v3.1)
|
UTMStack < 11.2.16 Authentication Bypass via InternalA…
|
UTMStack
|
UTMStack
|
2026-10-02T20:15:27.035Z |
2026-10-05T14:51:54.025Z |
|
cve-2026-82041
|
6.5 (v4.0)
9.9 (v3.1)
|
UTMStack < 11.2.16 Missing Authorization via Command W…
|
UTMStack
|
UTMStack
|
2026-10-02T20:13:27.638Z |
2026-10-05T16:14:55.503Z |
|
cve-2026-104019
|
9 (v3.1)
9.3 (v4.0)
|
OS command injection in the Studio Space startup valid…
|
AWS
|
sagemaker-distribution
|
2026-10-02T20:08:10.061Z |
2026-10-09T16:37:11.836Z |
|
cve-2026-104873
|
|
LangGraph SDK custom auth silently ignores actions= on…
|
langchain-ai
|
langgraph
|
2026-10-02T20:06:07.090Z |
2026-10-05T15:32:10.019Z |
|
cve-2026-103918
|
|
@orpc/zod: Prototype injection in smart coercion
|
middleapi
|
orpc
|
2026-10-02T20:02:50.946Z |
2026-10-05T17:19:02.554Z |
|
cve-2026-82040
|
5.3 (v4.0)
5 (v3.1)
|
UTMStack < 11.2.16 SSRF via IdentityProviderService
|
UTMStack
|
UTMStack
|
2026-10-02T19:59:50.162Z |
2026-10-05T20:30:30.825Z |
|
cve-2026-103036
|
|
@orpc/json-schema: Prototype injection in smart coercion
|
middleapi
|
orpc
|
2026-10-02T19:59:23.947Z |
2026-10-05T20:01:40.650Z |
|
cve-2026-82039
|
8.7 (v4.0)
8.8 (v3.1)
|
UTMStack < 11.2.16 SQL Injection via searchGroupsByFilter
|
UTMStack
|
UTMStack
|
2026-10-02T19:58:08.139Z |
2026-10-05T17:22:53.768Z |
|
cve-2026-104994
|
2.5 (v3.1)
|
Trivy before 0.71.0 allows directory traversal in…
|
aquasec
|
Trivy
|
2026-10-02T19:52:36.831Z |
2026-10-05T17:29:18.653Z |
|
cve-2026-104872
|
|
Multiple @opentelemetry/instrumentation-* packages exp…
|
open-telemetry
|
opentelemetry-js-contrib
|
2026-10-02T19:50:24.868Z |
2026-10-06T16:40:55.440Z |
|
cve-2026-104871
|
|
Angular SSR: Path Traversal to Sibling Directories in …
|
angular
|
angular-cli
|
2026-10-02T19:43:50.475Z |
2026-10-02T20:12:49.364Z |
|
cve-2026-104988
|
8.1 (v3.1)
|
Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc aut…
|
Red Hat
|
Red Hat Certificate System 10
|
2026-10-02T19:34:33.328Z |
2026-11-04T21:41:10.255Z |
|
cve-2026-104991
|
7.1 (v4.0)
7.1 (v3.1)
|
Phproject < 1.8.7 Missing Authorization via Issues REST API
|
Alanaktion
|
phproject
|
2026-10-02T19:33:47.741Z |
2026-10-06T16:39:54.666Z |
|
cve-2026-12392
|
5.3 (v3.1)
|
RPC secret disclosure via vendor data endpoint in Cano…
|
Canonical
|
MAAS
|
2026-10-02T19:24:09.110Z |
2026-10-04T14:50:39.521Z |
|
cve-2026-39718
|
8.8 (v3.1)
|
WordPress Wallstreet theme <= 2.8.6 - Cross Site Reque…
|
Webriti
|
Wallstreet
|
2026-10-02T19:16:31.625Z |
2026-10-02T20:13:21.126Z |
|
cve-2026-103958
|
7.6 (v3.1)
8.3 (v4.0)
|
Server-side request forgery in the tool server and rem…
|
AWS
|
loom
|
2026-10-02T19:07:30.052Z |
2026-10-09T16:36:53.294Z |
|
cve-2026-103957
|
6.2 (v3.1)
8.2 (v4.0)
|
Server-side request forgery in the OAuth2 discovery ha…
|
AWS
|
loom
|
2026-10-02T19:06:52.707Z |
2026-10-09T16:36:36.294Z |
|
cve-2026-96940
|
8.8 (v3.1)
|
Microsoft Exchange Server Elevation of Privilege Vulne…
|
Microsoft
|
Microsoft Exchange Server 2016 Cumulative Update 23
|
2026-10-02T19:06:19.061Z |
2026-10-31T18:07:13.192Z |
|
cve-2026-103956
|
10 (v3.1)
10 (v4.0)
|
Missing authentication for critical function in Loom for AWS
|
AWS
|
loom
|
2026-10-02T19:06:06.883Z |
2026-10-09T16:36:18.246Z |
|
cve-2020-37278
|
8.7 (v4.0)
7.5 (v3.1)
|
Weaver e-Bridge Unauthenticated Arbitrary File Read vi…
|
Weaver
|
e-Bridge
|
2026-10-02T18:38:24.013Z |
2026-10-02T20:14:15.156Z |
|
cve-2014-125130
|
8.7 (v4.0)
7.5 (v3.1)
|
CodeArt Google MP3 Audio Player 1.0.11 Arbitrary File …
|
Damjan
|
CodeArt Google MP3 Audio Player
|
2026-10-02T18:36:41.302Z |
2026-10-05T18:08:21.199Z |
|
cve-2023-54405
|
9.3 (v4.0)
9.8 (v3.1)
|
H3C CVM Unauthenticated File Upload via fileUpload/upl…
|
H3C
|
CVM
|
2026-10-02T18:36:03.442Z |
2026-10-05T15:48:29.812Z |
|
cve-2026-19856
|
|
All in One SEO < 5.0.2.1 - Unauthenticated Arbitrary S…
|
Unknown
|
All in One SEO
|
2026-10-02T18:25:43.042Z |
2026-10-06T20:20:10.836Z |