|
cve-2026-103584
|
1.1 (v4.0)
|
attacker-controlled javascript license URL via XSS
|
The Wikimedia Foundation
|
MediaWiki CommonsMetadata extension
|
2026-09-30T22:14:27.101Z |
2026-10-01T15:53:45.772Z |
|
cve-2026-47096
|
5.3 (v4.0)
6.1 (v3.1)
|
AJA HELO Plus < 2.1.7 Stored XSS via System Name Parameter
|
AJA Video Systems
|
HELO Plus
|
2026-09-30T22:02:09.294Z |
2026-10-01T14:26:39.130Z |
|
cve-2026-101283
|
9.2 (v4.0)
|
iperf3 3.20–3.21 (esnet/iperf) has a pre-auth hea…
|
esnet
|
iperf3
|
2026-09-30T21:32:14.699Z |
2026-10-01T15:51:37.669Z |
|
cve-2026-103001
|
|
PyJWT.decode() reintroduces options-dict mutation, ena…
|
jpadilla
|
pyjwt
|
2026-09-30T21:15:12.862Z |
2026-10-05T23:47:32.912Z |
|
cve-2026-101276
|
9.2 (v4.0)
|
iperf3 3.21 (esnet/iperf) contains a remote, unau…
|
esnet
|
iperf3
|
2026-09-30T21:11:52.046Z |
2026-10-01T15:51:00.728Z |
|
cve-2026-92172
|
N/A
|
Prior to v66.0.0.733.524 of Meta Horizon OS, OVRM…
|
Meta Platforms, Inc
|
Meta Horizon OS
|
2026-09-30T20:26:49.629Z |
2026-10-01T16:14:11.016Z |
|
cve-2026-92173
|
N/A
|
Prior to v74.0.0.878.1682 of Meta Horizon OS, Med…
|
Meta Platforms, Inc
|
Meta Horizon OS
|
2026-09-30T20:26:33.293Z |
2026-10-01T18:56:04.855Z |
|
cve-2023-54403
|
8.7 (v4.0)
7.5 (v3.1)
|
Yonyou U8 CRM Arbitrary File Read via getemaildata.php
|
Yonyou
|
U8 CRM
|
2026-09-30T20:25:40.223Z |
2026-10-02T16:34:42.297Z |
|
cve-2026-102105
|
|
Kiteworks Email Protection Gateway server-side request…
|
Kiteworks
|
Email Protection Gateway
|
2026-09-30T20:25:02.880Z |
2026-10-01T13:37:00.934Z |
|
cve-2026-102106
|
|
Kiteworks Email Protection Gateway improper authentication
|
Kiteworks
|
Email Protection Gateway
|
2026-09-30T20:24:46.723Z |
2026-10-01T13:37:01.070Z |
|
cve-2026-102107
|
|
Kiteworks Core user impersonation in a file-request feature
|
Kiteworks
|
Core
|
2026-09-30T20:24:29.840Z |
2026-10-01T13:37:01.215Z |
|
cve-2024-58387
|
8.7 (v4.0)
7.5 (v3.1)
|
Inspur HCM Cloud Arbitrary File Read via file/download…
|
Inspur
|
Haiyue HCM Cloud
|
2026-09-30T20:24:25.915Z |
2026-10-01T18:52:18.074Z |
|
cve-2026-102108
|
|
Kiteworks Email Protection Gateway deserialization of …
|
Kiteworks
|
Email Protection Gateway
|
2026-09-30T20:24:07.786Z |
2026-10-01T13:37:01.381Z |
|
cve-2026-102109
|
|
Kiteworks Secure Data Forms SQL injection
|
Kiteworks
|
Secure Data Forms
|
2026-09-30T20:23:36.117Z |
2026-10-01T13:37:01.539Z |
|
cve-2023-54402
|
8.7 (v4.0)
7.5 (v3.1)
|
iDocView SSRF via /doc/upload Endpoint Hardcoded Token
|
iDocView
|
iDocView
|
2026-09-30T20:22:33.022Z |
2026-10-27T01:30:28.350Z |
|
cve-2026-102110
|
|
Missing authentication on a Kiteworks appliance setup …
|
Kiteworks
|
Core
|
2026-09-30T20:21:42.338Z |
2026-10-01T13:37:01.683Z |
|
cve-2026-102111
|
|
Kiteworks Core Improper Validation of Specified Quanti…
|
Kiteworks
|
Core
|
2026-09-30T20:21:15.283Z |
2026-10-01T13:37:01.832Z |
|
cve-2026-102112
|
|
Kiteworks Core Local Privilege Escalation
|
Kiteworks
|
Core
|
2026-09-30T20:20:59.159Z |
2026-10-01T13:37:02.000Z |
|
cve-2026-102113
|
|
Kiteworks Core Local Privilege Escalation
|
Kiteworks
|
Core
|
2026-09-30T20:20:35.928Z |
2026-10-01T13:37:02.814Z |
|
cve-2026-102114
|
|
Kiteworks Core OS Command Injection
|
Kiteworks
|
Core
|
2026-09-30T20:20:18.843Z |
2026-10-01T13:37:02.961Z |
|
cve-2026-102115
|
|
Kiteworks Core Authentication Bypass in the Password R…
|
Kiteworks
|
Core
|
2026-09-30T20:19:55.265Z |
2026-10-01T13:37:03.130Z |
|
cve-2026-102116
|
|
Kiteworks Email Protection Gateway Path Traversal
|
Kiteworks
|
Email Protection Gateway
|
2026-09-30T20:19:20.088Z |
2026-10-01T13:37:03.301Z |
|
cve-2026-102117
|
|
Kiteworks Core Remote Code Execution
|
Kiteworks
|
Core
|
2026-09-30T20:19:02.903Z |
2026-10-01T13:37:03.467Z |
|
cve-2026-102118
|
|
Kiteworks Core before version 9.5.0 is vulnerable to L…
|
Kiteworks
|
Core
|
2026-09-30T20:18:21.236Z |
2026-10-01T13:37:03.614Z |
|
cve-2026-102119
|
|
Kiteworks Email Protection Gateway Path Traversal
|
Kiteworks
|
Email Protection Gateway
|
2026-09-30T20:18:01.841Z |
2026-10-01T13:37:03.752Z |
|
cve-2026-102120
|
|
Kiteworks Core OS Command Injection
|
Kiteworks
|
Core
|
2026-09-30T20:17:48.543Z |
2026-10-01T13:37:03.903Z |
|
cve-2026-102121
|
|
Kiteworks Secure Data Forms Exposure of Sensitive Info…
|
Kiteworks
|
Secure Data Forms
|
2026-09-30T20:17:31.859Z |
2026-10-01T13:37:04.051Z |
|
cve-2026-102104
|
|
Kiteworks Email Protection Gateway server-side request…
|
Kiteworks
|
Email Protection Gateway
|
2026-09-30T20:17:17.054Z |
2026-10-01T13:37:04.205Z |
|
cve-2026-102122
|
|
Kiteworks Core Incorrect Authorization
|
Kiteworks
|
Core
|
2026-09-30T20:16:24.341Z |
2026-10-01T13:37:04.360Z |
|
cve-2026-102123
|
|
Kiteworks Core Path Traversal
|
Kiteworks
|
Core
|
2026-09-30T20:16:01.901Z |
2026-10-01T13:37:04.500Z |