|
cve-2026-104907
|
4.8 (v4.0)
|
MISP: JavaScript Injection via Remote Tag ID in Event …
|
MISP
|
MISP
|
2026-10-02T15:51:34.565Z |
2026-10-02T16:18:12.403Z |
|
cve-2026-104906
|
6.2 (v4.0)
|
MISP TAXII Object Viewer Stored XSS via Unescaped JSON…
|
MISP
|
MISP
|
2026-10-02T15:49:32.948Z |
2026-10-02T16:17:21.730Z |
|
cve-2026-104844
|
|
PostCSS: Quadratic complexity in flat selector parsing…
|
postcss
|
postcss-selector-parser
|
2026-10-02T15:43:14.082Z |
2026-10-02T16:16:45.990Z |
|
cve-2026-104843
|
|
uv: Path traversal on Windows through wheel extraction
|
astral-sh
|
uv
|
2026-10-02T15:29:15.517Z |
2026-10-02T16:00:53.033Z |
|
cve-2026-94484
|
|
Next.js: Cache poisoning in Next.js SSG/ISR rendering …
|
vercel
|
next.js
|
2026-10-02T15:26:48.417Z |
2026-10-05T20:07:39.105Z |
|
cve-2026-94485
|
|
Next.js: Information disclosure in Next.js App Router …
|
vercel
|
next.js
|
2026-10-02T15:23:29.239Z |
2026-10-02T16:05:57.266Z |
|
cve-2026-104901
|
5.1 (v4.0)
|
MISP ID Translator: Unescaped Remote Event ID Enables …
|
MISP
|
MISP
|
2026-10-02T15:21:53.492Z |
2026-10-02T16:15:49.327Z |
|
cve-2026-94483
|
|
Next.js: Server-Side Request Forgery in Image Optimization
|
vercel
|
next.js
|
2026-10-02T15:18:38.684Z |
2026-10-06T16:33:25.979Z |
|
cve-2026-94543
|
|
Next.js: Cache poisoning of SSG and ISR pages in self-…
|
vercel
|
next.js
|
2026-10-02T15:16:49.658Z |
2026-10-06T16:31:58.295Z |
|
cve-2026-104900
|
5.3 (v4.0)
|
MISP Stored XSS via Unescaped Count Field Value in Rem…
|
MISP
|
MISP
|
2026-10-02T15:16:27.485Z |
2026-10-02T16:15:09.284Z |
|
cve-2026-94544
|
|
Next.js: Pending `use cache` fill can leak Draft Mode …
|
vercel
|
next.js
|
2026-10-02T15:14:43.506Z |
2026-10-05T20:21:54.256Z |
|
cve-2026-94486
|
|
Next.js: Information disclosure in the Next.js develop…
|
vercel
|
next.js
|
2026-10-02T15:12:31.134Z |
2026-10-02T16:20:19.256Z |
|
cve-2026-104638
|
|
onetwothreeneth HospitalManagementSystem sessions.php …
|
onetwothreeneth
|
HospitalManagementSystem
|
2026-10-02T15:00:11.877Z |
2026-10-02T16:21:32.979Z |
|
cve-2026-39717
|
4.3 (v3.1)
|
WordPress LearnPress plugin <= 4.4.10 - Broken Access …
|
ThimPress
|
LearnPress
|
2026-10-02T14:49:50.614Z |
2026-10-09T11:33:22.679Z |
|
cve-2026-39601
|
3.7 (v3.1)
|
WordPress Booking Calendar plugin <= 11.8.4 - Race Con…
|
WPdevelop
|
Booking Calendar
|
2026-10-02T14:49:13.832Z |
2026-10-05T07:01:17.773Z |
|
cve-2026-39600
|
4.7 (v3.1)
|
WordPress Aculect AI Companion plugin <= 0.8.2 - Unval…
|
Mehul Gohil
|
Aculect AI Companion
|
2026-10-02T14:47:33.805Z |
2026-10-07T16:37:01.379Z |
|
cve-2026-39444
|
5.4 (v3.1)
|
WordPress PublishPress Series plugin <= 3.1.3 - Insecu…
|
PublishPress
|
PublishPress Series
|
2026-10-02T14:46:08.063Z |
2026-10-02T16:48:56.046Z |
|
cve-2026-104637
|
|
onetwothreeneth HospitalManagementSystem controller.ph…
|
onetwothreeneth
|
HospitalManagementSystem
|
2026-10-02T14:45:15.421Z |
2026-10-02T15:05:20.597Z |
|
cve-2026-39439
|
6.5 (v3.1)
|
WordPress WebSamurai plugin <= 1.0.7 - Broken Access C…
|
Kiera Howe
|
WebSamurai
|
2026-10-02T14:43:15.849Z |
2026-10-02T15:36:35.417Z |
|
cve-2026-32585
|
6.5 (v3.1)
|
WordPress Airano MCP Bridge plugin <= 2.11.0 - Broken …
|
airano
|
Airano MCP Bridge
|
2026-10-02T14:42:08.710Z |
2026-10-03T15:12:23.899Z |
|
cve-2026-32584
|
5.3 (v3.1)
|
WordPress Smart One Click Setup – Complete Demo Import…
|
Chiranjit Hazarika
|
Smart One Click Setup – Complete Demo Import & Export
|
2026-10-02T14:41:03.346Z |
2026-10-02T15:07:45.249Z |
|
cve-2026-90970
|
9.9 (v3.1)
|
Improper Neutralization of Special Elements Used in a …
|
GitLab
|
GitLab AI Gateway
|
2026-10-02T14:34:49.558Z |
2026-10-02T16:48:01.744Z |
|
cve-2026-104625
|
|
CodeAstro Simple Loan Management System index.php sql …
|
CodeAstro
|
Simple Loan Management System
|
2026-10-02T14:30:10.567Z |
2026-10-06T16:29:59.557Z |
|
cve-2026-5782
|
5.2 (v3.1)
|
Reflected XSS in MRV Technology's TurkHotspot
|
MRV Technology Foreign Trade Ltd. Co.
|
TurkHotspot
|
2026-10-02T14:13:02.370Z |
2026-10-05T12:50:39.437Z |
|
cve-2026-104026
|
N/A
|
In Sapling SCM prior to v0.2.20260929-102736, con…
|
Meta Platforms, Inc
|
Sapling SCM
|
2026-10-02T14:06:02.380Z |
2026-10-02T14:30:01.530Z |
|
cve-2026-104614
|
|
CodeAstro Simple Pharmacy Management System delete.php…
|
CodeAstro
|
Simple Pharmacy Management System
|
2026-10-02T14:00:09.100Z |
2026-10-02T16:50:23.424Z |
|
cve-2026-94422
|
8.8 (v3.1)
8.7 (v4.0)
|
xdg-dbus-proxy: message filtering bypass via reply ser…
|
|
|
2026-10-02T13:54:10.589Z |
2026-10-24T03:08:12.584Z |
|
cve-2026-19652
|
|
Divi Membership <= 2.2.0 - Unauthenticated Privilege E…
|
DiviEngine
|
Divi Membership
|
2026-10-02T13:29:05.573Z |
2026-10-03T15:42:47.812Z |
|
cve-2026-93875
|
|
JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cro…
|
Crocoblock
|
JetAppointment
|
2026-10-02T13:29:05.089Z |
2026-10-02T13:42:19.583Z |
|
cve-2026-104721
|
6.3 (v4.0)
|
Logback: Incomplete protection against CVE-2026-19880
|
QOS.CH Sarl
|
Logback-classic
|
2026-10-02T13:21:59.195Z |
2026-10-02T13:21:59.195Z |