|
cve-2026-111684
|
7.2 (v4.0)
8.3 (v3.1)
|
Magistrala through 1.0.0 Cross-Tenant Authorization By…
|
absmach
|
magistrala
|
2026-10-16T17:39:41.598Z |
2026-10-21T21:05:32.356Z |
|
cve-2026-101687
|
|
Vulnerability in the Oracle E-Business Suite Inte…
|
Oracle Corporation
|
Oracle E-Business Suite Integrated SOA Gateway
|
2026-10-20T21:22:19.340Z |
2026-10-21T21:05:30.155Z |
|
cve-2026-111679
|
5.3 (v4.0)
5.4 (v3.1)
|
Ekko Studio through 0.7.36 Missing Authorization via /…
|
EKKOLearnAI
|
ekko-studio
|
2026-10-16T17:39:38.049Z |
2026-10-21T21:02:10.862Z |
|
cve-2026-111674
|
5.3 (v4.0)
4.3 (v3.1)
|
Tbed through 20240319 Missing Authorization via setImg…
|
Hello-hao
|
Tbed
|
2026-10-16T17:39:34.559Z |
2026-10-21T21:01:08.491Z |
|
cve-2026-111669
|
7.1 (v4.0)
6.5 (v3.1)
|
ZR.Admin.NET through 3.8.2 SQL Injection via PagerInfo…
|
izhaorui
|
Zr.Admin.NET
|
2026-10-16T17:39:31.080Z |
2026-10-21T20:59:36.503Z |
|
cve-2026-111664
|
4.8 (v4.0)
4.4 (v3.1)
|
Safing Portmaster before 2.2.5 Unauthenticated Forced …
|
safing
|
portmaster
|
2026-10-16T17:39:27.588Z |
2026-10-21T20:58:29.603Z |
|
cve-2026-111659
|
6.9 (v4.0)
6.5 (v3.1)
|
Waynboot-mall through 2.0.0 Unauthenticated Order Forg…
|
wayn111
|
waynboot-mall
|
2026-10-16T17:39:24.138Z |
2026-10-21T20:56:19.053Z |
|
cve-2026-70337
|
8.8 (v3.1)
|
Microsoft PowerShell Remote Code Execution Vulnerability
|
Microsoft
|
PowerShell 7.4
|
2026-08-11T17:07:13.444Z |
2026-10-21T20:55:13.016Z |
|
cve-2026-62800
|
8.8 (v3.1)
|
Windows SMBv3 Server Remote Code Execution Vulnerability
|
Microsoft
|
Windows 10 Version 1607
|
2026-08-11T17:06:15.503Z |
2026-10-21T20:53:51.693Z |
|
cve-2026-111654
|
5.3 (v4.0)
6.3 (v3.1)
|
FastBee through 2.1.0 IDOR via /iot/group By-ID Endpoints
|
kerwincui
|
FastBee
|
2026-10-16T17:39:20.715Z |
2026-10-21T20:53:32.854Z |
|
cve-2026-70344
|
7.8 (v3.1)
|
Windows Installer Elevation of Privilege Vulnerability
|
Microsoft
|
Windows 10 Version 1607
|
2026-08-11T17:05:36.601Z |
2026-10-21T20:53:07.339Z |
|
cve-2026-66804
|
7.8 (v3.1)
|
Microsoft Windows Cross Device Service Elevation of Pr…
|
Microsoft
|
Windows 10 Version 22H2
|
2026-08-11T17:05:36.051Z |
2026-10-21T20:53:06.838Z |
|
cve-2026-111649
|
7.1 (v4.0)
6.5 (v3.1)
|
Rocboss paopao-ce through 0.6.0-alpha.3 IDOR via Downl…
|
rocboss
|
paopao-ce
|
2026-10-16T17:39:17.296Z |
2026-10-21T20:51:20.277Z |
|
cve-2026-111644
|
6.9 (v4.0)
7.3 (v3.1)
|
Misaka Danmu Server through 2.8.9 Missing Authenticati…
|
l429609201
|
misaka_danmu_server
|
2026-10-16T17:39:13.747Z |
2026-10-21T20:47:20.877Z |
|
cve-2026-111639
|
8.6 (v4.0)
8.1 (v3.1)
|
bbs-go through 4.4.6 Account Takeover via Google One T…
|
mlogclub
|
bbs-go
|
2026-10-16T17:39:10.284Z |
2026-10-21T20:45:39.318Z |
|
cve-2026-111634
|
8.6 (v4.0)
8.1 (v3.1)
|
Helical Insight through 7.0.0 SQL Injection via /execu…
|
helicalinsight
|
helicalinsight
|
2026-10-16T17:39:06.906Z |
2026-10-21T20:44:36.649Z |
|
cve-2026-111629
|
5.3 (v4.0)
4.3 (v3.1)
|
IoTSharp through 3.6.1 Cross-Tenant Data Exposure via …
|
IoTSharp
|
IoTSharp
|
2026-10-16T17:39:03.518Z |
2026-10-21T20:43:22.568Z |
|
cve-2026-111624
|
6.3 (v4.0)
3.7 (v3.1)
|
Umbraco CMS before 17.7.1 and 18.2.1 Missing Authoriza…
|
umbraco
|
Umbraco-CMS
|
2026-10-16T17:39:00.093Z |
2026-10-21T20:41:26.462Z |
|
cve-2026-111619
|
7.1 (v4.0)
6.5 (v3.1)
|
FilePress through 3.0.1 SQL Injection via asc Paramete…
|
zyx0814
|
FilePress
|
2026-10-16T17:38:56.671Z |
2026-10-21T20:39:17.187Z |
|
cve-2026-111614
|
7.1 (v4.0)
6.5 (v3.1)
|
DataCap through 2025.1.1 IDOR via BaseController.getIn…
|
devlive-community
|
DataCap
|
2026-10-16T17:38:53.190Z |
2026-10-21T20:37:34.593Z |
|
cve-2026-17113
|
6 (v3.1)
|
Cri-o: cri-o: unvalidated image env var causes daemon crash
|
|
|
2026-08-24T21:22:49.638Z |
2026-10-21T20:12:46.564Z |
|
cve-2026-114117
|
8.2 (v4.0)
5.9 (v3.1)
|
Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation o…
|
vyperlang
|
vyper
|
2026-10-21T00:37:14.741Z |
2026-10-21T20:12:04.759Z |
|
cve-2026-114391
|
7.1 (v4.0)
7.1 (v3.1)
|
ZenTao PMS before 22.3 Authorization Bypass via Ajax C…
|
easysoft
|
zentaopms
|
2026-10-21T12:39:47.378Z |
2026-10-21T20:08:00.604Z |
|
cve-2026-114396
|
7.1 (v4.0)
7.1 (v3.1)
|
Trudesk through 1.2.11 MongoDB $where Injection via ti…
|
polonel
|
trudesk
|
2026-10-21T12:39:50.810Z |
2026-10-21T20:04:57.728Z |
|
cve-2026-114401
|
6.9 (v4.0)
5.3 (v3.1)
|
Trudesk through 1.2.11 Username Enumeration via Regex …
|
polonel
|
trudesk
|
2026-10-21T12:39:54.187Z |
2026-10-21T19:57:13.714Z |
|
cve-2026-114386
|
6.3 (v4.0)
4.8 (v3.1)
|
Pydantic AI Harness before 0.59.0 CodeMode Tool Call L…
|
pydantic
|
pydantic-ai-harness
|
2026-10-21T12:39:43.886Z |
2026-10-21T19:55:49.371Z |
|
cve-2026-53986
|
6.9 (v4.0)
5.3 (v3.1)
|
Girafit Camera App 1.9.1 Hardcoded TURN Credentials Di…
|
Girafit
|
Girafit camera app
|
2026-10-21T16:59:57.188Z |
2026-10-21T19:52:14.331Z |
|
cve-2026-114493
|
9.2 (v4.0)
8.6 (v3.1)
|
LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via H…
|
LocalAI
|
LocalAI
|
2026-10-21T17:54:17.584Z |
2026-10-21T19:50:15.052Z |
|
cve-2026-94416
|
6.8 (v3.1)
|
Aap-gateway: aap-gateway: authorization bypass via wor…
|
Red Hat
|
Red Hat Ansible Automation Platform 2.6 for RHEL 9
|
2026-09-24T12:25:11.735Z |
2026-10-21T19:38:23.553Z |
|
cve-2026-113470
|
N/A
|
Cryptographic issue in the Security Block-lists, Allow…
|
Mozilla
|
Firefox
|
2026-10-20T12:58:14.250Z |
2026-10-21T19:20:41.189Z |