|
cve-2026-90798
|
0.6 (v4.0)
|
Apache CouchDB: Replicator follows redirects indefinitely
|
Apache Software Foundation
|
Apache CouchDB
|
2026-10-20T15:39:52.048Z |
2026-10-20T18:10:07.139Z |
|
cve-2026-90797
|
7.7 (v4.0)
|
Apache CouchDB: Pre-authentication gzip decompression …
|
Apache Software Foundation
|
Apache CouchDB
|
2026-10-20T15:39:23.376Z |
2026-10-20T18:10:06.210Z |
|
cve-2026-108089
|
|
Apache Cocoon: Unauthenticated access to diagnostic in…
|
Apache Software Foundation
|
Apache Cocoon
|
2026-10-20T10:25:54.169Z |
2026-10-20T18:09:56.937Z |
|
cve-2026-107755
|
6 (v4.0)
|
Apache CouchDB: Credential Disclosure to Non-Owner Mem…
|
Apache Software Foundation
|
Apache CouchDB
|
2026-10-20T15:41:22.248Z |
2026-10-20T18:09:53.132Z |
|
cve-2026-103119
|
|
Apache Tomcat: AJP response mix-up
|
Apache Software Foundation
|
Apache Tomcat
|
2026-10-20T13:54:13.558Z |
2026-10-20T18:09:52.183Z |
|
cve-2025-60480
|
N/A
|
A heap buffer overflow in the gf_odf_ac4_cfg_alte…
|
n/a
|
n/a
|
2026-10-19T00:00:00.000Z |
2026-10-20T18:09:49.329Z |
|
cve-2025-55667
|
N/A
|
A segmentation violation in the dump_isom_saps fu…
|
n/a
|
n/a
|
2026-10-19T00:00:00.000Z |
2026-10-20T18:09:48.406Z |
|
cve-2025-52290
|
N/A
|
A NULL pointer dereference in the avpriv_h264_has…
|
n/a
|
n/a
|
2026-10-19T00:00:00.000Z |
2026-10-20T18:09:46.460Z |
|
cve-2026-10591
|
8.8 (v3.1)
8.6 (v4.0)
|
Kiro IDE Insufficient File Write Restrictions to Execu…
|
AWS
|
Kiro IDE
|
2026-06-02T15:34:40.106Z |
2026-10-20T18:08:17.704Z |
|
cve-2026-109588
|
8.8 (v3.1)
9.3 (v4.0)
|
Numeric truncation in the MPU buffer authorization che…
|
FreeRTOS
|
FreeRTOS-Kernel
|
2026-10-16T17:09:51.788Z |
2026-10-20T18:08:02.113Z |
|
cve-2026-68498
|
7.5 (v3.1)
|
jackson-core: Delayed maxNameLength enforcement for ch…
|
FasterXML
|
jackson-core
|
2026-10-16T21:11:03.551Z |
2026-10-20T18:08:01.960Z |
|
cve-2026-113403
|
7.1 (v4.0)
6.5 (v3.1)
|
ArmorX Global Technology｜ArmorX Spam - Command Injection
|
ArmorX Global Technology
|
ArmorX Spam
|
2026-10-20T07:04:25.847Z |
2026-10-20T18:08:01.485Z |
|
cve-2026-113407
|
8.7 (v4.0)
8.8 (v3.1)
|
YS-infoware｜BA-Workflow - SQL Injection
|
YS-infoware
|
BA-Workflow
|
2026-10-20T07:21:47.618Z |
2026-10-20T18:08:01.040Z |
|
cve-2026-113469
|
7.5 (v3.1)
|
Improper Signature Verification of Active Update Files
|
Stormshield
|
Stormshield Network Security
|
2026-10-20T08:29:49.095Z |
2026-10-20T18:08:00.762Z |
|
cve-2026-92539
|
|
Cross-organization user modification and deletion via …
|
Grafana
|
Grafana Enterprise
|
2026-10-20T16:55:17.875Z |
2026-10-20T18:08:00.621Z |
|
cve-2026-105772
|
9.1 (v4.0)
|
Arbitrary file read and write in Google ADK TypeScript…
|
Google
|
ADK TypeScript (@google/adk)
|
2026-10-20T17:50:13.132Z |
2026-10-20T18:08:00.481Z |
|
cve-2026-86831
|
8.7 (v3.1)
8.7 (v4.0)
|
Improper validation of pod identifier uniqueness in aw…
|
AWS
|
aws-network-policy-agent
|
2026-09-16T19:49:49.377Z |
2026-10-20T18:07:48.050Z |
|
cve-2026-8597
|
7.2 (v3.1)
6.4 (v4.0)
|
Missing integrity verification in Triton inference han…
|
AWS
|
Amazon SageMaker Python SDK
|
2026-05-14T19:37:02.187Z |
2026-10-20T18:07:38.889Z |
|
cve-2026-108709
|
|
Apache Kylin: Unauthenticated Metadata Broadcast (insi…
|
Apache Software Foundation
|
Apache Kylin
|
2026-10-16T19:38:21.601Z |
2026-10-20T18:06:59.378Z |
|
cve-2026-113605
|
8.6 (v4.0)
7.2 (v3.1)
|
Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypa…
|
Stirling-Tools
|
Stirling-PDF
|
2026-10-20T15:40:32.050Z |
2026-10-20T18:06:57.644Z |
|
cve-2026-69080
|
|
Apache Kylin: Broken Access Control in QuerySQLBlackli…
|
Apache Software Foundation
|
Apache Kylin
|
2026-10-16T19:37:50.174Z |
2026-10-20T18:04:54.819Z |
|
cve-2026-69077
|
|
Apache Kylin: JobController allows unauthorized cross-…
|
Apache Software Foundation
|
Apache Kylin
|
2026-10-16T19:33:20.218Z |
2026-10-20T18:03:35.109Z |
|
cve-2026-69076
|
|
Apache Kylin: Unauthorized cross-project job discard
|
Apache Software Foundation
|
Apache Kylin
|
2026-10-16T19:32:39.538Z |
2026-10-20T18:02:18.110Z |
|
cve-2026-68573
|
|
Apache Kylin: Unauthenticated Metastore Cleanup
|
Apache Software Foundation
|
Apache Kylin
|
2026-10-16T19:32:22.205Z |
2026-10-20T17:59:10.444Z |
|
cve-2026-96331
|
9.3 (v3.1)
|
WordPress Ajax Search Pro plugin <= 4.29.1 - SQL Injec…
|
wpdreams
|
Ajax Search Pro
|
2026-10-09T10:00:21.324Z |
2026-10-20T17:58:59.053Z |
|
cve-2026-68572
|
|
Apache Kylin: Unauthorized SQL execution to Spark SQL env
|
Apache Software Foundation
|
Apache Kylin
|
2026-10-16T19:32:03.193Z |
2026-10-20T17:50:19.415Z |
|
cve-2026-110005
|
N/A
|
Moghtech Komodo contains an OS command injection vulne…
|
Komodo
|
Komodo
|
2026-10-13T19:23:52.191Z |
2026-10-20T17:48:06.015Z |
|
cve-2026-113660
|
|
ApostropheCMS: Authenticated Object-Level Authorizatio…
|
apostrophecms
|
apostrophe
|
2026-10-20T17:04:06.548Z |
2026-10-20T17:43:51.404Z |
|
cve-2026-113666
|
|
ApostropheCMS: Authenticated projection-exclusion prot…
|
apostrophecms
|
apostrophe
|
2026-10-20T17:25:44.574Z |
2026-10-20T17:43:12.999Z |
|
cve-2026-112019
|
6.9 (v4.0)
6.1 (v3.1)
|
cgltf through 1.15 Heap Out-of-Bounds Read via cgltf_a…
|
jkuhlmann
|
cgltf
|
2026-10-18T11:38:39.224Z |
2026-10-20T17:42:50.088Z |