|
cve-2026-110936
|
|
A vulnerability has been identified in Siemens So…
|
Siemens
|
Siemens Software Center
|
2026-10-15T14:01:17.797Z |
2026-10-21T03:56:21.823Z |
|
cve-2026-86949
|
N/A
|
This issue was addressed by enforcing library val…
|
Apple
|
Xcode
|
2026-10-20T00:50:54.372Z |
2026-10-21T03:56:20.055Z |
|
cve-2026-107366
|
8.3 (v3.1)
|
Langflow OSS Authorization Bypass Through User-Control…
|
IBM
|
Langflow OSS
|
2026-10-19T23:49:23.120Z |
2026-10-21T03:56:18.876Z |
|
cve-2026-105453
|
8.4 (v3.1)
|
IBM Sterling Connect:Direct for Unix Improper Privileg…
|
IBM
|
Sterling Connect Direct for Unix
|
2026-10-19T23:56:06.910Z |
2026-10-21T03:56:17.640Z |
|
cve-2026-102438
|
8.5 (v4.0)
|
An uncontrolled search path element vulnerability…
|
ASUS
|
Armoury Crate
|
2026-10-20T02:00:05.773Z |
2026-10-21T03:56:15.397Z |
|
cve-2026-96656
|
|
Plex Media Server arbitrary file write
|
Plex
|
Media Server
|
2026-09-23T16:07:10.048Z |
2026-10-21T03:56:10.489Z |
|
cve-2026-106173
|
9.4 (v3.1)
|
A improper limitation of a pathname to a restrict…
|
Fortinet
|
FortiSIEM
|
2026-10-13T17:37:09.900Z |
2026-10-21T03:56:09.329Z |
|
cve-2026-111609
|
5.1 (v4.0)
3.8 (v3.1)
|
PKP Open Journal Systems through 3.5.0-5 Cross-Journal…
|
PKP
|
Open Journal Systems
|
2026-10-16T17:38:49.767Z |
2026-10-21T02:31:53.986Z |
|
cve-2026-111604
|
5.1 (v4.0)
3.8 (v3.1)
|
eladmin through 2.7 Broken Access Control via /api/use…
|
elunez
|
eladmin
|
2026-10-16T17:38:46.270Z |
2026-10-21T02:30:50.899Z |
|
cve-2026-49868
|
|
RIOT: DHCPv6 client _parse_reply() missing sub-option …
|
RIOT-OS
|
RIOT
|
2026-10-16T16:50:58.750Z |
2026-10-21T02:29:33.220Z |
|
cve-2026-92262
|
|
MariaDB: Numerous issues caused by historical #mysql50…
|
MariaDB
|
server
|
2026-10-16T16:25:46.964Z |
2026-10-21T02:28:14.389Z |
|
cve-2026-86009
|
|
Mailu: Domain managers can allow themselves to spoof o…
|
Mailu
|
Mailu
|
2026-10-16T16:19:06.420Z |
2026-10-21T02:26:54.464Z |
|
cve-2026-44977
|
|
countly-server: Stored XSS in feedback upload enables …
|
Countly
|
countly-server
|
2026-10-16T16:04:45.868Z |
2026-10-21T02:24:31.741Z |
|
cve-2026-92263
|
|
SparkyFitness: Authenticated OS command injection (hos…
|
CodeWithCJ
|
SparkyFitness
|
2026-10-16T15:50:54.302Z |
2026-10-21T02:23:37.265Z |
|
cve-2026-48741
|
|
libIEC61850: Remote NULL dereference in MMS Read alter…
|
mz-automation
|
libiec61850
|
2026-10-16T15:45:32.680Z |
2026-10-21T02:22:38.275Z |
|
cve-2026-57487
|
|
libupnp chunked HTTP bodies can bypass g_maxContentLen…
|
pupnp
|
pupnp
|
2026-10-16T15:33:56.394Z |
2026-10-21T02:21:37.115Z |
|
cve-2026-95859
|
|
libp2p-rust: Gossipsub GRAFT topics unbounded growth
|
libp2p
|
rust-libp2p
|
2026-10-16T15:19:04.504Z |
2026-10-21T02:20:36.706Z |
|
cve-2026-111390
|
6 (v4.0)
5.3 (v3.1)
|
Erupt through 2.3.0 HQL Injection via linkTreeVal in D…
|
erupts
|
erupt
|
2026-10-16T11:38:02.147Z |
2026-10-21T02:18:10.357Z |
|
cve-2026-111447
|
8.1 (v3.1)
|
Wheels 1.1 through 4.1.2 resolves nestedPropertie…
|
Wheels
|
Wheels
|
2026-10-16T03:39:51.368Z |
2026-10-21T02:11:55.972Z |
|
cve-2026-111442
|
5.3 (v4.0)
|
Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x…
|
BackdropCMS
|
Backdrop
|
2026-10-16T03:09:43.812Z |
2026-10-21T02:10:42.533Z |
|
cve-2026-111385
|
6.3 (v4.0)
4.8 (v3.1)
|
Nezha 2.1.0 before 2.3.15 Host Header Injection via MC…
|
nezhahq
|
nezha
|
2026-10-16T01:17:54.057Z |
2026-10-21T02:07:31.134Z |
|
cve-2026-111380
|
8.7 (v4.0)
8.8 (v3.1)
|
FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin A…
|
FreeRDP
|
FreeRDP
|
2026-10-16T01:17:48.329Z |
2026-10-21T02:06:15.611Z |
|
cve-2026-111375
|
6.3 (v4.0)
4.8 (v3.1)
|
FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAI…
|
FreeRDP
|
FreeRDP
|
2026-10-16T01:17:42.614Z |
2026-10-21T02:02:11.431Z |
|
cve-2026-111237
|
|
Ultralytics FastSAM AutoBackend Model Loading autoback…
|
Ultralytics
|
FastSAM
|
2026-10-16T01:00:18.557Z |
2026-10-21T02:01:19.191Z |
|
cve-2025-66969
|
N/A
|
Integer overflow in OpenModSim (<=1.11.0), leadin…
|
n/a
|
n/a
|
2026-10-16T00:00:00.000Z |
2026-10-21T02:00:04.759Z |
|
cve-2026-26846
|
N/A
|
Buffer Overflow vulnerability in WEINVEIW CO.,LTD…
|
n/a
|
n/a
|
2026-10-16T00:00:00.000Z |
2026-10-21T01:57:56.424Z |
|
cve-2026-95183
|
N/A
|
An issue in the context-compaction feature of Dee…
|
n/a
|
n/a
|
2026-10-16T00:00:00.000Z |
2026-10-21T01:55:26.148Z |
|
cve-2026-111367
|
6.9 (v4.0)
6.5 (v3.1)
|
BillionMail through 4.9 Forgeable JWTs via Default Sig…
|
aaPanel
|
BillionMail
|
2026-10-15T21:43:50.886Z |
2026-10-21T01:53:10.056Z |
|
cve-2026-111359
|
7.1 (v4.0)
7.1 (v3.1)
|
CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and rece…
|
crmeb
|
CRMEB
|
2026-10-15T21:43:47.038Z |
2026-10-21T01:48:22.257Z |
|
cve-2026-111353
|
5.3 (v4.0)
4.3 (v3.1)
|
Peppermint through 0.5.5 Missing Authorization via Tim…
|
Peppermint-Lab
|
peppermint
|
2026-10-15T21:43:43.068Z |
2026-10-21T01:47:26.201Z |