|
cve-2026-104871
|
|
Angular SSR: Path Traversal to Sibling Directories in …
|
angular
|
angular-cli
|
2026-10-02T19:43:50.475Z |
2026-10-02T20:12:49.364Z |
|
cve-2026-104988
|
8.1 (v3.1)
|
Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc aut…
|
Red Hat
|
Red Hat Certificate System 10
|
2026-10-02T19:34:33.328Z |
2026-11-04T21:41:10.255Z |
|
cve-2026-104991
|
7.1 (v4.0)
7.1 (v3.1)
|
Phproject < 1.8.7 Missing Authorization via Issues REST API
|
Alanaktion
|
phproject
|
2026-10-02T19:33:47.741Z |
2026-10-06T16:39:54.666Z |
|
cve-2026-12392
|
5.3 (v3.1)
|
RPC secret disclosure via vendor data endpoint in Cano…
|
Canonical
|
MAAS
|
2026-10-02T19:24:09.110Z |
2026-10-04T14:50:39.521Z |
|
cve-2026-39718
|
8.8 (v3.1)
|
WordPress Wallstreet theme <= 2.8.6 - Cross Site Reque…
|
Webriti
|
Wallstreet
|
2026-10-02T19:16:31.625Z |
2026-10-02T20:13:21.126Z |
|
cve-2026-103958
|
7.6 (v3.1)
8.3 (v4.0)
|
Server-side request forgery in the tool server and rem…
|
AWS
|
loom
|
2026-10-02T19:07:30.052Z |
2026-10-09T16:36:53.294Z |
|
cve-2026-103957
|
6.2 (v3.1)
8.2 (v4.0)
|
Server-side request forgery in the OAuth2 discovery ha…
|
AWS
|
loom
|
2026-10-02T19:06:52.707Z |
2026-10-09T16:36:36.294Z |
|
cve-2026-96940
|
8.8 (v3.1)
|
Microsoft Exchange Server Elevation of Privilege Vulne…
|
Microsoft
|
Microsoft Exchange Server 2016 Cumulative Update 23
|
2026-10-02T19:06:19.061Z |
2026-10-31T18:07:13.192Z |
|
cve-2026-103956
|
10 (v3.1)
10 (v4.0)
|
Missing authentication for critical function in Loom for AWS
|
AWS
|
loom
|
2026-10-02T19:06:06.883Z |
2026-10-09T16:36:18.246Z |
|
cve-2020-37278
|
8.7 (v4.0)
7.5 (v3.1)
|
Weaver e-Bridge Unauthenticated Arbitrary File Read vi…
|
Weaver
|
e-Bridge
|
2026-10-02T18:38:24.013Z |
2026-10-02T20:14:15.156Z |
|
cve-2014-125130
|
8.7 (v4.0)
7.5 (v3.1)
|
CodeArt Google MP3 Audio Player 1.0.11 Arbitrary File …
|
Damjan
|
CodeArt Google MP3 Audio Player
|
2026-10-02T18:36:41.302Z |
2026-10-05T18:08:21.199Z |
|
cve-2023-54405
|
9.3 (v4.0)
9.8 (v3.1)
|
H3C CVM Unauthenticated File Upload via fileUpload/upl…
|
H3C
|
CVM
|
2026-10-02T18:36:03.442Z |
2026-10-05T15:48:29.812Z |
|
cve-2026-19856
|
|
All in One SEO < 5.0.2.1 - Unauthenticated Arbitrary S…
|
Unknown
|
All in One SEO
|
2026-10-02T18:25:43.042Z |
2026-10-06T20:20:10.836Z |
|
cve-2026-104861
|
|
probe-image-size: Quadratic-time Denial of Service in …
|
nodeca
|
probe-image-size
|
2026-10-02T17:56:15.515Z |
2026-10-02T18:20:12.054Z |
|
cve-2026-104859
|
|
Nx: OS command injection in the @nx/docker release pipeline
|
nrwl
|
nx
|
2026-10-02T17:49:37.975Z |
2026-10-05T20:09:01.291Z |
|
cve-2026-102795
|
9.3 (v3.1)
7 (v4.0)
|
Apache Traffic Server: SNI to Host header matching pol…
|
Apache Software Foundation
|
Apache Traffic Server
|
2026-10-02T17:40:50.648Z |
2026-10-02T18:30:59.242Z |
|
cve-2026-104855
|
|
Wasmtime: Preemption and traps during bulk operations …
|
bytecodealliance
|
wasmtime
|
2026-10-02T17:37:50.941Z |
2026-10-06T16:38:35.157Z |
|
cve-2026-59265
|
|
Apache OpenOffice, Apache OpenOffice: Opening a malici…
|
Apache Software Foundation
|
Apache OpenOffice
|
2026-10-02T17:34:06.937Z |
2026-10-08T03:12:11.059Z |
|
cve-2026-102626
|
7.2 (v4.0)
|
LimeSurvey Community Edition 7.4.0 - Stored XSS throug…
|
LimeSurvey
|
LimeSurvey
|
2026-10-02T17:16:14.226Z |
2026-10-02T18:31:54.975Z |
|
cve-2026-104854
|
|
Nx daemon and plugin worker sockets are accessible to …
|
nrwl
|
nx
|
2026-10-02T16:59:48.238Z |
2026-10-02T17:28:06.022Z |
|
cve-2026-104853
|
|
Nx: Path traversal in nx migrate package-migrations ex…
|
nrwl
|
nx
|
2026-10-02T16:52:07.624Z |
2026-10-02T17:41:54.417Z |
|
cve-2026-104851
|
|
fsspec: Server-Side Template Injection in ReferenceFil…
|
fsspec
|
filesystem_spec
|
2026-10-02T16:36:48.513Z |
2026-10-05T20:03:36.502Z |
|
cve-2026-104849
|
|
Tinypool: Prototype Pollution Gadget to RCE in run() options
|
tinylibs
|
tinypool
|
2026-10-02T16:17:28.062Z |
2026-10-06T16:35:59.948Z |
|
cve-2026-104848
|
|
Tinypool: Prototype Pollution gadget in worker options…
|
tinylibs
|
tinypool
|
2026-10-02T16:15:04.101Z |
2026-10-02T17:29:40.500Z |
|
cve-2026-104914
|
5.3 (v4.0)
|
MISP: Soft-Deleted Attributes from Other Organizations…
|
MISP
|
MISP
|
2026-10-02T16:09:40.333Z |
2026-10-06T18:23:08.747Z |
|
cve-2026-103627
|
N/A
|
Information leak in SVG in Google Chrome prior to…
|
Google
|
Chrome
|
2026-10-02T16:07:56.619Z |
2026-10-06T17:54:02.596Z |
|
cve-2026-103631
|
N/A
|
Buffer overflow in WebRTC in Google Chrome prior …
|
Google
|
Chrome
|
2026-10-02T16:07:56.360Z |
2026-10-06T17:54:43.182Z |
|
cve-2026-103623
|
N/A
|
Use after free in MediaStream in Google Chrome pr…
|
Google
|
Chrome
|
2026-10-02T16:07:56.124Z |
2026-10-06T17:55:21.360Z |
|
cve-2026-103622
|
N/A
|
Use after free in SVG in Google Chrome prior to 1…
|
Google
|
Chrome
|
2026-10-02T16:07:55.875Z |
2026-10-03T03:55:39.438Z |
|
cve-2026-103629
|
N/A
|
Integer overflow in Skia in Google Chrome prior t…
|
Google
|
Chrome
|
2026-10-02T16:07:55.593Z |
2026-10-03T15:41:15.921Z |