|
cve-2026-94655
|
8.2 (v4.0)
|
Apache Thrift: Lua `TJsonProtocol` string/number reade…
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:59:18.277Z |
2026-10-02T17:21:12.862Z |
|
cve-2026-94654
|
8.2 (v4.0)
|
Apache Thrift: Python `TNonblockingServer` busy-loops …
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:58:49.429Z |
2026-10-02T17:25:06.026Z |
|
cve-2026-85209
|
6.5 (v3.1)
|
IDOR in AVEZ Electronics's LMS
|
AVEZ Electronics Communication Training and Consultancy Trade Inc.
|
Learning Management System (LMS)
|
2026-10-02T11:58:15.723Z |
2026-10-02T17:30:23.005Z |
|
cve-2026-94653
|
8.2 (v4.0)
|
Apache Thrift: PHP framed/memory/HTTP transports re-sl…
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:56:35.706Z |
2026-10-05T16:15:35.012Z |
|
cve-2026-94652
|
6.3 (v4.0)
|
Apache Thrift: C++ `TEvhttpServer` leaks its `RequestC…
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:54:41.996Z |
2026-10-05T16:16:18.135Z |
|
cve-2026-94648
|
8.2 (v4.0)
|
Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` ha…
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:52:48.907Z |
2026-10-05T16:16:58.679Z |
|
cve-2026-94646
|
8.7 (v4.0)
|
Apache Thrift: Node.js `server.js` ends the process on…
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:52:21.192Z |
2026-10-02T13:50:57.551Z |
|
cve-2026-94638
|
6.3 (v4.0)
|
Apache Thrift: PHP `thrift_protocol` C extension ignor…
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:49:43.765Z |
2026-10-05T16:24:52.177Z |
|
cve-2026-94637
|
8.2 (v4.0)
|
Apache Thrift: Go `THeaderTransport` does not bound th…
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:49:02.869Z |
2026-10-05T16:24:12.567Z |
|
cve-2026-94636
|
8.2 (v4.0)
|
Apache Thrift: Python `TZlibTransport` stops enforcing…
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:47:54.613Z |
2026-10-02T17:32:21.357Z |
|
cve-2026-92834
|
6.3 (v4.0)
|
Apache Thrift: C++ WebSocket server transport does not…
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:45:25.930Z |
2026-10-02T13:54:38.203Z |
|
cve-2026-104609
|
|
onetwothreeneth HospitalManagementSystem edit_accounts…
|
onetwothreeneth
|
HospitalManagementSystem
|
2026-10-02T11:45:15.342Z |
2026-10-06T16:26:33.823Z |
|
cve-2026-90440
|
8.2 (v4.0)
|
Apache Thrift: An exception escaping a libevent callba…
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:44:11.636Z |
2026-10-02T13:55:52.226Z |
|
cve-2026-87117
|
8.7 (v4.0)
|
Apache Thrift: PHP `thrift_protocol` accelerator deref…
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:43:11.832Z |
2026-10-02T17:33:40.379Z |
|
cve-2026-86537
|
8.7 (v4.0)
|
Apache Thrift: A truncated HTTP request stops the D li…
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:40:51.704Z |
2026-10-02T14:02:10.469Z |
|
cve-2026-86536
|
6.3 (v4.0)
|
Apache Thrift, Apache Thrift, Apache Thrift: A map key…
|
Apache Software Foundation
|
Apache Thrift
|
2026-10-02T11:40:06.911Z |
2026-10-02T17:31:43.876Z |
|
cve-2026-104473
|
5.1 (v4.0)
6.1 (v3.1)
|
YesWiki before 4.5.3 Multiple Reflected XSS via BazaR …
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:37.280Z |
2026-10-08T15:22:12.197Z |
|
cve-2026-104472
|
8.7 (v4.0)
7.5 (v3.1)
|
YesWiki before 4.6.7 Missing Authorization via Attachm…
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:36.710Z |
2026-10-02T14:09:06.224Z |
|
cve-2026-104471
|
8.6 (v4.0)
7.2 (v3.1)
|
YesWiki before 4.6.7 Unrestricted File Upload via Baza…
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:36.035Z |
2026-10-02T13:43:17.948Z |
|
cve-2026-104470
|
5.3 (v4.0)
5 (v3.1)
|
YesWiki before 4.6.7 SSRF via Bazar valeur Action url …
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:35.372Z |
2026-10-04T14:59:42.904Z |
|
cve-2026-104469
|
7.6 (v4.0)
6.8 (v3.1)
|
YesWiki before 4.6.7 Session Fixation via Login in Aut…
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:34.771Z |
2026-10-06T16:20:33.693Z |
|
cve-2026-104468
|
6.3 (v4.0)
4.8 (v3.1)
|
YesWiki before 4.6.7 Non-Expiring Password Reset Token…
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:34.102Z |
2026-10-02T14:10:28.610Z |
|
cve-2026-104467
|
9.2 (v4.0)
8.1 (v3.1)
|
YesWiki before 4.6.7 Authorization Bypass via Public A…
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:33.480Z |
2026-10-02T15:15:54.625Z |
|
cve-2026-104466
|
5.1 (v4.0)
5.4 (v3.1)
|
YesWiki before 4.6.7 Stored XSS via Wakka Markdown Ima…
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:32.854Z |
2026-10-02T14:03:59.518Z |
|
cve-2026-104465
|
5.1 (v4.0)
6.1 (v3.1)
|
YesWiki before 4.6.7 Reflected XSS via field Parameter…
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:32.172Z |
2026-10-06T16:19:13.098Z |
|
cve-2026-104464
|
8.8 (v4.0)
8.6 (v3.1)
|
YesWiki before 4.6.7 SSRF via Bazar abonnements sync a…
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:31.506Z |
2026-10-02T14:55:06.060Z |
|
cve-2026-104463
|
8.3 (v4.0)
7 (v3.1)
|
YesWiki before 4.6.7 Unauthenticated SSRF via Activity…
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:30.873Z |
2026-10-02T13:41:38.384Z |
|
cve-2026-104462
|
8.8 (v4.0)
7.5 (v3.1)
|
YesWiki before 4.6.7 SQL Injection via nuagetag tags p…
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:30.224Z |
2026-10-02T14:06:21.582Z |
|
cve-2026-104461
|
5.1 (v4.0)
5.4 (v3.1)
|
YesWiki before 4.6.7 Stored XSS via Unsanitized SVG Up…
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:29.623Z |
2026-10-06T16:17:59.105Z |
|
cve-2026-104460
|
8.7 (v4.0)
7.5 (v3.1)
|
YesWiki before 4.6.7 Unauthenticated Blind SQL Injecti…
|
YesWiki
|
yeswiki
|
2026-10-02T11:38:28.921Z |
2026-10-02T14:07:38.302Z |