Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-107081 N/A SQL injection via identifier injection in the tab… n/a
n/a
2026-10-19T00:00:00.000Z 2026-10-22T02:26:03.172Z
cve-2026-112030 diem-project diem dmDataLoad.php default password diem-project
diem
2026-10-18T23:15:19.936Z 2026-10-22T02:24:15.691Z
cve-2026-112026 light0011 cms UserModel.class.php sha1 weak password hash light0011
cms
2026-10-18T22:15:07.093Z 2026-10-22T02:23:31.089Z
cve-2026-111991 WongKinYiu yolov9 ONNX Metadata common.py DetectMultiB… WongKinYiu
yolov9
2026-10-18T15:00:15.472Z 2026-10-22T02:22:45.394Z
cve-2026-111986 AUTOMATIC1111 stable-diffusion-webui Model Instantiati… AUTOMATIC1111
stable-diffusion-webui
2026-10-18T13:00:16.340Z 2026-10-22T02:21:58.777Z
cve-2026-112059 6.9 (v4.0) 6.1 (v3.1) libLAS through 1.8.1 Heap Out-of-Bounds Write via LASS… libLAS
libLAS
2026-10-18T12:19:49.627Z 2026-10-22T02:19:48.617Z
cve-2026-112054 6.8 (v4.0) 5.5 (v3.1) Schroedinger libschroedinger through 1.0.11 Divide by … Schroedinger
schroedinger
2026-10-18T12:19:45.481Z 2026-10-22T02:17:56.690Z
cve-2026-112049 6.7 (v4.0) 5.5 (v3.1) Vita3K before build 4187 Path Traversal via VPK Packag… Vita3K
Vita3K
2026-10-18T12:19:40.323Z 2026-10-22T02:16:33.061Z
cve-2026-112020 6.9 (v4.0) 6.1 (v3.1) LodePNG through 20261006 Heap Out-of-Bounds Read via g… lvandeve
lodepng
2026-10-18T11:38:39.921Z 2026-10-22T02:15:36.959Z
cve-2026-112000 7.2 (v4.0) 7.6 (v3.1) Vanus 0.8.0 through 0.9.0 Missing Authorization in Gat… vanus-labs
vanus
2026-10-18T11:38:25.755Z 2026-10-22T02:13:24.964Z
cve-2026-111877 dext34-morgan Books4Cash search.php cross site scripting dext34-morgan
Books4Cash
2026-10-18T06:00:13.648Z 2026-10-22T02:11:35.863Z
cve-2026-111873 itsmeravitejak Online-Examination-System AJAX Endpoint… itsmeravitejak
Online-Examination-System
2026-10-18T04:15:14.564Z 2026-10-22T02:11:00.662Z
cve-2026-111869 makeplane API Endpoint reliance on untrusted inputs in… makeplane
plane
2026-10-18T02:45:15.572Z 2026-10-22T02:09:55.748Z
cve-2026-113406 8.7 (v4.0) 8.8 (v3.1) YS-infoware|BA-Workflow - SQL Injection YS-infoware
BA-Workflow
2026-10-20T07:20:14.580Z 2026-10-22T02:09:45.606Z
cve-2026-113405 8.7 (v4.0) 8.8 (v3.1) YS-infoware|BA-Workflow - SQL Injection YS-infoware
BA-Workflow
2026-10-20T07:17:45.541Z 2026-10-22T02:09:07.199Z
cve-2026-111932 4.8 (v4.0) 3.4 (v3.1) Coder before 2.34.2 Stored HTML Injection via Appearan… coder
coder
2026-10-17T18:46:42.757Z 2026-10-22T02:08:49.284Z
cve-2026-87910 5.7 (v4.0) tarfile hardlink fallback ignores custom extraction fi… Python Software Foundation
CPython
2026-09-11T17:27:04.339Z 2026-10-22T00:31:28.666Z
cve-2025-62501 7 (v4.0) SSH Hostkey Misconfiguration Vulnerability in Archer Devices TP-Link Systems Inc.
Archer AX53 v1.0
2026-02-03T18:52:54.216Z 2026-10-22T00:17:14.305Z
cve-2026-76268 9.8 (v3.1) Missing Authentication for Critical Function in the Pa… Splunk
Splunk Enterprise
2026-10-07T20:46:31.281Z 2026-10-21T22:52:20.998Z
cve-2026-106053 N/A {'providerMetadata': {'orgId': 'ceab7361-8a18-47b1-92ba-4d7d25f6715a', 'shortName': 'GitLab', 'dateUpdated': '2026-10-21T22:24:39.279Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} N/A N/A 2026-10-21T22:24:39.279Z
cve-2026-111927 8.7 (v4.0) 7.7 (v3.1) Coder before 2.35.4 Credential Theft via Workspace Pro… coder
coder
2026-10-17T18:46:39.347Z 2026-10-21T21:45:39.027Z
cve-2026-111921 5.3 (v4.0) 5.4 (v3.1) Vikunja 0.13.0 before 2.7.0 Incorrect Authorization in… go-vikunja
vikunja
2026-10-17T18:46:35.329Z 2026-10-21T21:44:01.251Z
cve-2026-111916 6.9 (v4.0) 5.3 (v3.1) Admidio before 5.0.16 Information Disclosure via rss/l… Admidio
admidio
2026-10-17T18:46:31.787Z 2026-10-21T21:43:01.660Z
cve-2026-111910 7.1 (v4.0) 6.5 (v3.1) phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-bet… thorsten
phpMyFAQ
2026-10-17T18:46:28.155Z 2026-10-21T21:41:44.258Z
cve-2026-111905 7 (v4.0) 6 (v3.1) phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2… thorsten
phpMyFAQ
2026-10-17T18:46:24.781Z 2026-10-21T21:40:10.782Z
cve-2026-111900 5.3 (v4.0) 4.3 (v3.1) phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-bet… thorsten
phpMyFAQ
2026-10-17T18:46:21.382Z 2026-10-21T21:39:13.659Z
cve-2026-111894 5.1 (v4.0) 5.4 (v3.1) phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2… thorsten
phpMyFAQ
2026-10-17T18:46:17.887Z 2026-10-21T21:36:08.684Z
cve-2024-58398 5.3 (v4.0) 4.3 (v3.1) Coder 2.3.1 before 2.16.1 Open Redirect via Login Page… coder
coder
2026-10-17T18:46:07.073Z 2026-10-21T21:34:59.156Z
cve-2026-111855 7.5 (v3.1) An issue was discovered on Tektronix 3 Series MDO… Tektronix
3 Series MDO
2026-10-17T02:09:21.352Z 2026-10-21T21:34:00.446Z
cve-2026-108372 LoopX serve-status permissive CORS policy exposes cont… huangruiteng
loopx
2026-10-16T21:29:13.757Z 2026-10-21T21:31:36.971Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description