|
cve-2026-101138
|
|
CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unau…
|
Unknown
|
CMP – Coming Soon & Maintenance
|
2026-10-21T08:38:55.566Z |
2026-10-21T10:14:55.768Z |
|
cve-2026-103301
|
|
Payment Gateway for Telcell < 2.0.5 - Unauthenticated …
|
Unknown
|
Payment Gateway for Telcell
|
2026-10-21T08:38:56.211Z |
2026-10-21T10:14:55.631Z |
|
cve-2026-104641
|
|
Simple Shopping Cart < 5.3.3 - Unauthenticated Payment…
|
Unknown
|
Simple Shopping Cart
|
2026-10-21T08:38:56.835Z |
2026-10-21T10:14:55.498Z |
|
cve-2026-104642
|
|
Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Pric…
|
Unknown
|
Simple Shopping Cart
|
2026-10-21T08:38:57.475Z |
2026-10-21T10:14:55.356Z |
|
cve-2026-105256
|
|
LatePoint < 5.7.5 - Unauthenticated Payment Bypass via…
|
Unknown
|
LatePoint
|
2026-10-21T08:38:58.118Z |
2026-10-21T10:14:55.218Z |
|
cve-2026-107447
|
|
Contest Gallery < 34.0.1 - Unauthenticated Vote Restri…
|
Unknown
|
Contest Gallery
|
2026-10-21T08:38:58.748Z |
2026-10-21T10:14:55.080Z |
|
cve-2026-14556
|
|
HappyForms < 1.26.15 - Unauthenticated HTML Injection …
|
Unknown
|
HappyForms
|
2026-10-21T08:38:59.379Z |
2026-10-21T10:14:54.939Z |
|
cve-2026-85683
|
|
Jane Menu < 1.5.1 - Unauthenticated Stored XSS via Sto…
|
Unknown
|
Jane Menu
|
2026-10-21T08:39:00.033Z |
2026-10-21T10:14:54.800Z |
|
cve-2025-26625
|
|
Git LFS may write to arbitrary files via crafted symlinks
|
git-lfs
|
git-lfs
|
2025-10-17T15:30:14.630Z |
2026-10-21T10:07:30.375Z |
|
cve-2026-6045
|
5.4 (v4.0)
|
Heap buffer overflow in EMF+ gradient brush import
|
The Document Foundation
|
LibreOffice
|
2026-06-15T16:22:16.574Z |
2026-10-21T09:30:52.886Z |
|
cve-2025-66178
|
6.7 (v3.1)
|
A improper neutralization of special elements use…
|
Fortinet
|
FortiWeb
|
2026-03-10T16:44:21.731Z |
2026-10-21T09:25:51.351Z |
|
cve-2026-14618
|
|
Open5GS AMF nnrf-handler.c amf_nnrf_handle_nf_discover…
|
n/a
|
Open5GS
|
2026-07-04T06:00:09.970Z |
2026-10-21T09:03:41.814Z |
|
cve-2026-10157
|
|
Open5GS NGAP PathSwitchRequest Message ngap-handler.c …
|
n/a
|
Open5GS
|
2026-05-31T00:30:10.718Z |
2026-10-21T09:02:58.337Z |
|
cve-2026-8743
|
|
Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_i…
|
n/a
|
Open5GS
|
2026-05-17T09:00:13.637Z |
2026-10-21T09:02:39.438Z |
|
cve-2026-10565
|
|
Open5GS NGAP Handover gmm-sm.c gmm_state_security_mode…
|
n/a
|
Open5GS
|
2026-06-02T01:30:09.909Z |
2026-10-21T09:02:05.612Z |
|
cve-2026-56449
|
|
Apache HTTP Server: mod_proxy_html: crash in dump_content
|
Apache Software Foundation
|
Apache HTTP Server
|
2026-10-01T16:06:24.050Z |
2026-10-21T07:59:33.661Z |
|
cve-2026-110927
|
N/A
|
{'rejectedReasons': [{'lang': 'en', 'value': 'CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585.'}], 'providerMetadata': {'orgId': '53f830b8-0a3f-465b-8143-3b8a9948e749', 'shortName': 'redhat', 'dateUpdated': '2026-10-21T06:48:13.674Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}}
|
N/A
|
N/A
|
2026-10-15T13:07:57.789Z |
2026-10-21T06:48:13.674Z |
|
cve-2026-110926
|
N/A
|
{'rejectedReasons': [{'lang': 'en', 'value': 'CVE-2026-110926 has been marked as a duplicate of CVE-2026-106582.'}], 'providerMetadata': {'orgId': '53f830b8-0a3f-465b-8143-3b8a9948e749', 'shortName': 'redhat', 'dateUpdated': '2026-10-21T06:48:02.933Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}}
|
N/A
|
N/A
|
2026-10-15T05:25:07.564Z |
2026-10-21T06:48:02.933Z |
|
cve-2026-110925
|
N/A
|
{'rejectedReasons': [{'lang': 'en', 'value': 'CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583.'}], 'providerMetadata': {'orgId': '53f830b8-0a3f-465b-8143-3b8a9948e749', 'shortName': 'redhat', 'dateUpdated': '2026-10-21T06:47:55.382Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}}
|
N/A
|
N/A
|
2026-10-15T05:25:00.811Z |
2026-10-21T06:47:55.382Z |
|
cve-2026-110924
|
N/A
|
{'rejectedReasons': [{'lang': 'en', 'value': 'CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553.'}], 'providerMetadata': {'orgId': '53f830b8-0a3f-465b-8143-3b8a9948e749', 'shortName': 'redhat', 'dateUpdated': '2026-10-21T06:47:43.806Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}}
|
N/A
|
N/A
|
2026-10-15T13:07:45.685Z |
2026-10-21T06:47:43.806Z |
|
cve-2026-110923
|
N/A
|
{'rejectedReasons': [{'lang': 'en', 'value': 'CVE-2026-110923 has been marked as a duplicate of CVE-2026-106552.'}], 'providerMetadata': {'orgId': '53f830b8-0a3f-465b-8143-3b8a9948e749', 'shortName': 'redhat', 'dateUpdated': '2026-10-21T06:40:17.428Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}}
|
N/A
|
N/A
|
2026-10-15T05:24:59.657Z |
2026-10-21T06:40:17.428Z |
|
cve-2025-68045
|
7.5 (v3.1)
|
WordPress WP Event SOlution plugin <= 4.1.12 - Broken …
|
Arraytics
|
WP Event Solution
|
2026-06-16T09:00:29.079Z |
2026-10-21T06:38:36.546Z |
|
cve-2026-101296
|
|
Apache Tomcat: JNDIRealm bind credential validation fa…
|
Apache Software Foundation
|
Apache Tomcat
|
2026-10-20T13:45:39.959Z |
2026-10-21T06:31:55.233Z |
|
cve-2026-16487
|
N/A
|
{'rejectedReasons': [{'lang': 'en', 'value': 'Red Hat Product Security has determined that this is not a vulnerability in bootc or containers-common. bootc fetches images under /etc/containers/policy.json. The shipped default is insecureAcceptAnything for registries without an explicit signature requirement; registry.redhat.io and registry.access.redhat.com require signatures. Updating a mutable tag requires the ability to publish to the reference an administrator has already configured the host to follow. Requiring signatures is available through that policy and through bootc enforce-container-sigpolicy, which is off by default. Persistence of /var across bootc rollback is expected image-mode behavior.'}], 'providerMetadata': {'orgId': '53f830b8-0a3f-465b-8143-3b8a9948e749', 'shortName': 'redhat', 'dateUpdated': '2026-10-21T06:20:13.903Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}}
|
N/A
|
N/A
|
2026-10-19T05:27:30.898Z |
2026-10-21T06:20:13.903Z |
|
cve-2026-106931
|
7.8 (v3.0)
8.5 (v4.0)
|
SiteGuard Server Edition contains an OS command i…
|
EG Secure Solutions Inc.
|
SiteGuard Server Edition for Apache httpd
|
2026-10-14T04:45:07.678Z |
2026-10-21T03:56:27.300Z |
|
cve-2026-96652
|
|
Plex Media Server SSRF
|
Plex
|
Media Server
|
2026-09-23T16:06:15.517Z |
2026-10-21T03:56:26.467Z |
|
cve-2026-96654
|
|
Plex Media Server URL injection
|
Plex
|
Media Server
|
2026-09-23T16:06:35.821Z |
2026-10-21T03:56:25.683Z |
|
cve-2026-96655
|
|
Plex Media Server arbitrary-host SSRF
|
Plex
|
Media Server
|
2026-09-23T16:06:53.133Z |
2026-10-21T03:56:24.883Z |
|
cve-2026-86471
|
9.3 (v4.0)
|
Apache CouchDB: Admin credentials leading to code exec…
|
Apache Software Foundation
|
Apache CouchDB
|
2026-10-20T15:38:09.681Z |
2026-10-21T03:56:24.122Z |
|
cve-2026-76740
|
7.2 (v3.1)
|
HPE Compute Scale-up Server 3200 and 3250 platforms, S…
|
Hewlett Packard Enterprise
|
HPE Compute Scale-up Server 3200 platform
|
2026-10-19T06:25:55.088Z |
2026-10-21T03:56:22.565Z |