|
cve-2026-102626
|
7.2 (v4.0)
|
LimeSurvey Community Edition 7.4.0 - Stored XSS throug…
|
LimeSurvey
|
LimeSurvey
|
2026-10-02T17:16:14.226Z |
2026-10-02T18:31:54.975Z |
|
cve-2026-104854
|
|
Nx daemon and plugin worker sockets are accessible to …
|
nrwl
|
nx
|
2026-10-02T16:59:48.238Z |
2026-10-02T17:28:06.022Z |
|
cve-2026-104853
|
|
Nx: Path traversal in nx migrate package-migrations ex…
|
nrwl
|
nx
|
2026-10-02T16:52:07.624Z |
2026-10-02T17:41:54.417Z |
|
cve-2026-104851
|
|
fsspec: Server-Side Template Injection in ReferenceFil…
|
fsspec
|
filesystem_spec
|
2026-10-02T16:36:48.513Z |
2026-10-05T20:03:36.502Z |
|
cve-2026-104849
|
|
Tinypool: Prototype Pollution Gadget to RCE in run() options
|
tinylibs
|
tinypool
|
2026-10-02T16:17:28.062Z |
2026-10-06T16:35:59.948Z |
|
cve-2026-104848
|
|
Tinypool: Prototype Pollution gadget in worker options…
|
tinylibs
|
tinypool
|
2026-10-02T16:15:04.101Z |
2026-10-02T17:29:40.500Z |
|
cve-2026-104914
|
5.3 (v4.0)
|
MISP: Soft-Deleted Attributes from Other Organizations…
|
MISP
|
MISP
|
2026-10-02T16:09:40.333Z |
2026-10-06T18:23:08.747Z |
|
cve-2026-103627
|
N/A
|
Information leak in SVG in Google Chrome prior to…
|
Google
|
Chrome
|
2026-10-02T16:07:56.619Z |
2026-10-06T17:54:02.596Z |
|
cve-2026-103631
|
N/A
|
Buffer overflow in WebRTC in Google Chrome prior …
|
Google
|
Chrome
|
2026-10-02T16:07:56.360Z |
2026-10-06T17:54:43.182Z |
|
cve-2026-103623
|
N/A
|
Use after free in MediaStream in Google Chrome pr…
|
Google
|
Chrome
|
2026-10-02T16:07:56.124Z |
2026-10-06T17:55:21.360Z |
|
cve-2026-103622
|
N/A
|
Use after free in SVG in Google Chrome prior to 1…
|
Google
|
Chrome
|
2026-10-02T16:07:55.875Z |
2026-10-03T03:55:39.438Z |
|
cve-2026-103629
|
N/A
|
Integer overflow in Skia in Google Chrome prior t…
|
Google
|
Chrome
|
2026-10-02T16:07:55.593Z |
2026-10-03T15:41:15.921Z |
|
cve-2026-103624
|
N/A
|
Use after free in Contextual Tasks in Google Chro…
|
Google
|
Chrome
|
2026-10-02T16:07:55.405Z |
2026-10-03T15:41:41.085Z |
|
cve-2026-103625
|
N/A
|
Type confusion in V8 in Google Chrome prior to 15…
|
Google
|
Chrome
|
2026-10-02T16:07:55.104Z |
2026-10-03T03:55:38.726Z |
|
cve-2026-103630
|
N/A
|
Use after free in FedCM in Google Chrome prior to…
|
Google
|
Chrome
|
2026-10-02T16:07:54.904Z |
2026-10-06T13:09:20.834Z |
|
cve-2026-103621
|
N/A
|
Integer overflow in Compositing in Google Chrome …
|
Google
|
Chrome
|
2026-10-02T16:07:54.589Z |
2026-10-03T15:42:06.095Z |
|
cve-2026-103626
|
N/A
|
Incorrect authorization in FileSystem in Google C…
|
Google
|
Chrome
|
2026-10-02T16:07:54.337Z |
2026-10-03T15:42:35.436Z |
|
cve-2026-103628
|
N/A
|
Out of bounds write in WebGL in Google Chrome pri…
|
Google
|
Chrome
|
2026-10-02T16:07:53.905Z |
2026-10-03T03:55:37.226Z |
|
cve-2026-103648
|
9.1 (v3.1)
|
Improper Limitation of a Pathname to a Restricted Dire…
|
demsking
|
image-downloader
|
2026-10-02T16:05:25.331Z |
2026-10-03T15:52:55.709Z |
|
cve-2026-104912
|
7.1 (v4.0)
|
MISP Correlation Authorization Bypass Exposes Restrict…
|
MISP
|
MISP
|
2026-10-02T16:04:50.580Z |
2026-10-03T15:52:55.841Z |
|
cve-2026-96613
|
7.1 (v4.0)
6.5 (v3.1)
|
Missing Authorization in Meari IoT Cloud Platform Open…
|
Meari
|
IoT Cloud Platform OpenAPI Service
|
2026-10-02T16:03:04.281Z |
2026-10-03T15:52:55.965Z |
|
cve-2026-104847
|
|
ProseMirror: XSS vulnerability in prosemirror-view's p…
|
ProseMirror
|
prosemirror-view
|
2026-10-02T16:02:42.475Z |
2026-10-02T16:57:44.659Z |
|
cve-2026-104910
|
5.3 (v4.0)
|
MISP Information Disclosure via Related Events Listing…
|
MISP
|
MISP
|
2026-10-02T16:01:32.781Z |
2026-10-03T15:52:56.095Z |
|
cve-2026-104846
|
|
Seroval: `fromJSON()` Promise thenable assimilation in…
|
lxsmnsyc
|
seroval
|
2026-10-02T15:59:45.802Z |
2026-10-05T20:10:22.499Z |
|
cve-2026-101104
|
6.3 (v4.0)
7.7 (v3.1)
|
Missing Authorization in Meari IoT Cloud Platform Open…
|
Meari
|
IoT Cloud Platform OpenAPI Service
|
2026-10-02T15:58:21.626Z |
2026-10-03T15:52:56.225Z |
|
cve-2026-104908
|
7.1 (v4.0)
|
MISP Decaying Model Import Mass Assignment Allows Cros…
|
MISP
|
MISP
|
2026-10-02T15:56:13.969Z |
2026-10-02T16:19:17.687Z |
|
cve-2026-104845
|
|
Seroval: Memory exhaustion via unchecked TypedArray le…
|
lxsmnsyc
|
seroval
|
2026-10-02T15:55:21.197Z |
2026-10-06T16:34:23.733Z |
|
cve-2026-104907
|
4.8 (v4.0)
|
MISP: JavaScript Injection via Remote Tag ID in Event …
|
MISP
|
MISP
|
2026-10-02T15:51:34.565Z |
2026-10-02T16:18:12.403Z |
|
cve-2026-104906
|
6.2 (v4.0)
|
MISP TAXII Object Viewer Stored XSS via Unescaped JSON…
|
MISP
|
MISP
|
2026-10-02T15:49:32.948Z |
2026-10-02T16:17:21.730Z |
|
cve-2026-104844
|
|
PostCSS: Quadratic complexity in flat selector parsing…
|
postcss
|
postcss-selector-parser
|
2026-10-02T15:43:14.082Z |
2026-10-02T16:16:45.990Z |