|
cve-2026-111353
|
5.3 (v4.0)
4.3 (v3.1)
|
Peppermint through 0.5.5 Missing Authorization via Tim…
|
Peppermint-Lab
|
peppermint
|
2026-10-15T21:43:43.068Z |
2026-10-21T01:47:26.201Z |
|
cve-2026-111348
|
5.3 (v4.0)
5.4 (v3.1)
|
Likeshop through 3.5.1 IDOR via AfterSale API Refund E…
|
likeshop
|
likeshop
|
2026-10-15T21:43:39.350Z |
2026-10-21T01:46:15.633Z |
|
cve-2026-111343
|
5.3 (v4.0)
4.3 (v3.1)
|
pig through 4.1.1 Missing Authorization via GET /admin…
|
pig-mesh
|
pig
|
2026-10-15T21:43:35.878Z |
2026-10-21T01:44:35.077Z |
|
cve-2026-111324
|
6.9 (v4.0)
5.3 (v3.1)
|
rustdesk-api through 2.7 Authorization Bypass via POST…
|
lejianwen
|
rustdesk-api
|
2026-10-15T21:43:32.384Z |
2026-10-21T01:43:07.736Z |
|
cve-2026-111313
|
7.1 (v4.0)
6.5 (v3.1)
|
JobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetch
|
DaKheera47
|
JobOps
|
2026-10-15T21:43:28.822Z |
2026-10-21T01:41:31.540Z |
|
cve-2026-111281
|
9.3 (v4.0)
9.8 (v3.1)
|
Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode …
|
Jooan
|
JA-A12
|
2026-10-15T21:43:25.321Z |
2026-10-21T01:40:14.038Z |
|
cve-2026-111275
|
6.9 (v4.0)
6.1 (v3.1)
|
nifti_clib through 3.0.1 Stack Out-of-Bounds Access vi…
|
NIFTI-Imaging
|
nifti_clib
|
2026-10-15T21:43:21.786Z |
2026-10-21T01:37:40.421Z |
|
cve-2026-111270
|
6.9 (v4.0)
6.1 (v3.1)
|
libmodplug through 0.8.9.1 Heap Out-of-Bounds Write vi…
|
Konstanty Bialkowski
|
libmodplug
|
2026-10-15T21:43:17.665Z |
2026-10-21T01:33:42.918Z |
|
cve-2026-111170
|
7.1 (v4.0)
6.5 (v3.1)
|
kedro-datasets 9.3.0 through 9.6.0 Path Traversal via …
|
kedro-org
|
kedro-datasets
|
2026-10-15T18:57:55.295Z |
2026-10-21T01:30:43.369Z |
|
cve-2026-111165
|
6.8 (v4.0)
5.5 (v3.1)
|
libmikmod through 3.3.15 Out-of-Bounds Read in MTM_Loa…
|
sezero
|
libmikmod
|
2026-10-15T18:57:51.926Z |
2026-10-21T01:27:50.397Z |
|
cve-2026-111160
|
8.7 (v4.0)
7.5 (v3.1)
|
LightLLM through 1.2.0 Unauthenticated DoS via pd_kv_t…
|
ModelTC
|
LightLLM
|
2026-10-15T18:57:48.390Z |
2026-10-21T01:24:32.515Z |
|
cve-2026-111155
|
6.9 (v4.0)
6.1 (v3.1)
|
libTiMidity through 0.2.8 Out-of-Bounds Read via Sound…
|
sezero
|
libtimidity
|
2026-10-15T18:57:43.192Z |
2026-10-21T01:23:29.143Z |
|
cve-2026-111150
|
6.8 (v4.0)
5.5 (v3.1)
|
ValleyBell libvgm through commit a6eed945 Heap Out-of-…
|
ValleyBell
|
libvgm
|
2026-10-15T18:57:39.493Z |
2026-10-21T01:22:43.222Z |
|
cve-2026-111145
|
6.9 (v4.0)
6.1 (v3.1)
|
ytnef through 2.1.2 Heap Out-of-Bounds Read via Decomp…
|
Yeraze
|
ytnef
|
2026-10-15T18:57:36.084Z |
2026-10-21T01:20:26.553Z |
|
cve-2026-111140
|
6.9 (v4.0)
6.1 (v3.1)
|
libregf through 20260526 Heap Out-of-Bounds Read via l…
|
libyal
|
libregf
|
2026-10-15T18:57:32.622Z |
2026-10-21T01:19:40.902Z |
|
cve-2026-111130
|
6.9 (v4.0)
6.1 (v3.1)
|
OpenSlide through 4.0.1 Heap Out-of-Bounds Read via MI…
|
OpenSlide
|
openslide
|
2026-10-15T18:57:25.805Z |
2026-10-21T01:16:55.790Z |
|
cve-2026-111125
|
6.9 (v4.0)
6.1 (v3.1)
|
CFITSIO through 4.7.0 Heap Out-of-Bounds Read via HCOM…
|
HEASARC
|
cfitsio
|
2026-10-15T18:57:22.035Z |
2026-10-21T01:15:29.785Z |
|
cve-2026-110876
|
6.8 (v4.0)
5.5 (v3.1)
|
AdPlug through 2.4 Out-of-Bounds Read via CxsmPlayer::…
|
adplug
|
adplug
|
2026-10-15T18:57:18.619Z |
2026-10-21T01:14:06.812Z |
|
cve-2026-111232
|
4.8 (v4.0)
4.8 (v3.1)
|
Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via …
|
Netgate
|
pfSense CE
|
2026-10-15T18:46:32.161Z |
2026-10-21T01:11:30.708Z |
|
cve-2026-111227
|
5.1 (v4.0)
5.5 (v3.1)
|
Netgate pfSense CE through 2.9.0 CRLF Injection via se…
|
Netgate
|
pfSense CE
|
2026-10-15T18:46:26.531Z |
2026-10-21T01:10:35.133Z |
|
cve-2026-111222
|
7.5 (v4.0)
6.6 (v3.1)
|
Netgate pfSense CE through 2.9.0 php.ini Injection via…
|
Netgate
|
pfSense CE
|
2026-10-15T18:46:23.081Z |
2026-10-21T01:08:42.916Z |
|
cve-2026-111217
|
8.6 (v4.0)
7.2 (v3.1)
|
Netgate pfSense CE through 2.9.0 OS Command Injection …
|
Netgate
|
pfSense CE
|
2026-10-15T18:46:19.325Z |
2026-10-21T01:07:02.299Z |
|
cve-2026-57496
|
|
NetLicensing MCP Server: REST Path Traversal Bypasses …
|
Labs64
|
NetLicensing-MCP
|
2026-10-15T18:40:16.558Z |
2026-10-21T01:06:14.636Z |
|
cve-2026-104828
|
|
HtmlUnit Neko: Mutation XSS (mXSS) in HTMLWriterFilter…
|
HtmlUnit
|
htmlunit-neko
|
2026-10-15T18:36:49.613Z |
2026-10-21T01:04:51.279Z |
|
cve-2026-55872
|
|
GYM One admin user list is vulnerable to stored cross-…
|
mayerbalintdev
|
GYM-One
|
2026-10-15T18:27:06.595Z |
2026-10-21T01:03:46.364Z |
|
cve-2026-55239
|
|
Tianji: SQL Injection via unsanitized timezone paramet…
|
msgbyte
|
tianji
|
2026-10-15T18:14:21.918Z |
2026-10-21T01:02:29.450Z |
|
cve-2026-55876
|
|
Helium: Stored XSS via Unrestricted SVG File Upload — …
|
HeliumEdu
|
platform
|
2026-10-15T17:23:07.781Z |
2026-10-21T01:01:03.086Z |
|
cve-2026-104266
|
|
tinytag: Infinite loop when parsing certain M4A files …
|
tinytag
|
tinytag
|
2026-10-15T17:13:26.636Z |
2026-10-21T01:00:05.989Z |
|
cve-2026-16528
|
8.4 (v4.0)
|
Insertion of Sensitive Information into Log File …
|
ASUS
|
Router
|
2026-10-07T02:02:43.107Z |
2026-10-21T00:18:02.224Z |
|
cve-2026-93908
|
|
Real Estate Manager <= 7.3 - Authenticated (Subscriber…
|
rameez_iqbal
|
Real Estate Manager – Property Listing and Agent Management
|
2026-09-30T08:28:03.930Z |
2026-10-21T00:11:03.238Z |