|
cve-2026-16753
|
N/A
|
CVE-2026-16753
|
Lowcoder
|
Lowcoder
|
2026-10-13T19:21:10.107Z |
2026-10-20T16:55:48.381Z |
|
cve-2026-101304
|
N/A
|
Multiple jail filesystem root escapes
|
FreeBSD
|
FreeBSD
|
2026-10-15T06:46:03.792Z |
2026-10-20T16:53:31.151Z |
|
cve-2026-63619
|
|
Apache Kylin: Missing authorization and path-confineme…
|
Apache Software Foundation
|
Apache Kylin
|
2026-10-16T12:11:51.082Z |
2026-10-20T16:49:10.635Z |
|
cve-2026-112936
|
|
filelock: ReadWriteLock follows a symlink at the lock …
|
tox-dev
|
filelock
|
2026-10-20T14:34:47.210Z |
2026-10-20T16:47:39.872Z |
|
cve-2026-112946
|
|
Vite: Files outside `server.fs.allow` could be served …
|
vitejs
|
vite
|
2026-10-20T15:03:55.196Z |
2026-10-20T16:46:18.810Z |
|
cve-2026-112836
|
8.8 (v3.1)
|
WordPress VikRentCar plugin <= 1.4.8 - Cross Site Requ…
|
e4jvikwp
|
VikRentCar
|
2026-10-20T15:10:13.770Z |
2026-10-20T16:44:17.508Z |
|
cve-2026-112951
|
|
ApostropheCMS: Color field validation bypass allows st…
|
apostrophecms
|
apostrophe
|
2026-10-20T15:33:09.945Z |
2026-10-20T16:43:32.126Z |
|
cve-2025-71436
|
7.1 (v4.0)
7.1 (v3.1)
|
Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap B…
|
librdf
|
Raptor RDF Syntax Library
|
2026-10-20T15:40:22.461Z |
2026-10-20T16:41:49.461Z |
|
cve-2026-113597
|
5.3 (v4.0)
5.4 (v3.1)
|
Blinko through 1.8.8 IDOR via Tag tRPC Router Procedures
|
blinkospace
|
blinko
|
2026-10-20T15:40:26.082Z |
2026-10-20T16:40:26.591Z |
|
cve-2026-113602
|
6.9 (v4.0)
5.3 (v3.1)
|
json-smart through 2.6.0 Strict-Mode Validation Bypass…
|
json-smart
|
json-smart
|
2026-10-20T15:40:29.753Z |
2026-10-20T16:30:53.742Z |
|
cve-2026-113607
|
7.1 (v4.0)
6.5 (v3.1)
|
Configurable Reports block for Moodle before 5.3.0 Aut…
|
jleyva
|
moodle-block_configurablereports
|
2026-10-20T15:40:33.391Z |
2026-10-20T16:28:22.834Z |
|
cve-2026-113612
|
5.3 (v4.0)
5.4 (v3.1)
|
SparkyFitness before 0.17.0 Missing Authorization via …
|
CodeWithCJ
|
SparkyFitness
|
2026-10-20T15:40:36.888Z |
2026-10-20T16:25:31.674Z |
|
cve-2026-112953
|
|
ApostropheCMS: Exposure of Sensitive Information via p…
|
apostrophecms
|
apostrophe
|
2026-10-20T15:47:25.640Z |
2026-10-20T16:22:21.269Z |
|
cve-2026-113679
|
7.3 (v4.0)
7 (v3.1)
|
HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via …
|
harfbuzz
|
harfbuzz
|
2026-10-20T15:40:40.379Z |
2026-10-20T16:21:50.578Z |
|
cve-2026-113676
|
5.3 (v4.0)
4.3 (v3.1)
|
Froxlor 0.10.0 before 2.3.15 Authorization Bypass via …
|
froxlor
|
froxlor
|
2026-10-20T15:40:38.273Z |
2026-10-20T16:20:58.011Z |
|
cve-2026-113609
|
4.8 (v4.0)
3.3 (v3.1)
|
Bandisoft Bandizip before 7.47 Mark-of-the-Web Bypass …
|
Bandisoft
|
Bandizip
|
2026-10-20T15:40:34.772Z |
2026-10-20T16:20:16.264Z |
|
cve-2026-113604
|
6.8 (v4.0)
5.5 (v3.1)
|
Ghidra 10.2 through 12.1.4 Denial of Service via ELF L…
|
NationalSecurityAgency
|
ghidra
|
2026-10-20T15:40:31.409Z |
2026-10-20T16:19:49.190Z |
|
cve-2026-113599
|
5.3 (v4.0)
5.4 (v3.1)
|
Modoboa before 2.8.0 IDOR via API v2 armessages Auto-R…
|
modoboa
|
modoboa
|
2026-10-20T15:40:27.636Z |
2026-10-20T16:19:21.574Z |
|
cve-2026-113594
|
5.3 (v4.0)
5.4 (v3.1)
|
Sharkord before 0.0.8 Missing Authorization via update…
|
Sharkord
|
sharkord
|
2026-10-20T15:40:23.782Z |
2026-10-20T16:17:58.243Z |
|
cve-2026-112948
|
|
Vitest: Servers misapply `server.fs.deny`, serving `.e…
|
vitest-dev
|
vitest
|
2026-10-20T15:15:01.927Z |
2026-10-20T16:16:59.623Z |
|
cve-2026-112824
|
5.3 (v3.1)
|
WordPress Bus Ticket Booking with Seat Reservation plu…
|
Magepeople inc.
|
Bus Ticket Booking with Seat Reservation
|
2026-10-20T15:13:47.804Z |
2026-10-20T16:16:17.587Z |
|
cve-2026-111764
|
|
A2A Java SDK has a fail-open default task authorization
|
a2aproject
|
a2a-java
|
2026-10-20T15:05:26.905Z |
2026-10-20T16:15:50.172Z |
|
cve-2026-112956
|
|
ApostropheCMS: Archive duplicate continuation lets con…
|
apostrophecms
|
apostrophe
|
2026-10-20T15:57:27.287Z |
2026-10-20T16:15:02.976Z |
|
cve-2026-112240
|
6.3 (v4.0)
|
Broken Access Control in extension "TYPO3 Fluid-Form b…
|
TYPO3
|
Extension "TYPO3 Fluid-Form by coding.ms"
|
2026-10-20T09:30:51.530Z |
2026-10-20T16:13:19.980Z |
|
cve-2026-43852
|
8.2 (v4.0)
|
A vulnerability could allow an authenticated atta…
|
Advantech
|
ADAM-3600
|
2026-10-20T09:06:53.865Z |
2026-10-20T16:12:52.535Z |
|
cve-2026-43838
|
9.2 (v4.0)
|
A stack-based buffer overflow vulnerability in th…
|
Advantech
|
ADAM-3600
|
2026-10-20T08:18:13.241Z |
2026-10-20T16:12:08.657Z |
|
cve-2026-111059
|
|
Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.M…
|
mljar
|
mercury
|
2026-10-19T16:11:29.745Z |
2026-10-20T16:11:40.067Z |
|
cve-2026-112159
|
|
JumpServer Template Rendering os command injection
|
n/a
|
JumpServer
|
2026-10-19T16:15:17.871Z |
2026-10-20T16:11:34.028Z |
|
cve-2026-12660
|
2.7 (v3.1)
|
IBM MQ Path Traversal
|
IBM
|
MQ Operator
|
2026-10-19T16:40:20.554Z |
2026-10-20T16:11:26.821Z |
|
cve-2026-113404
|
8.7 (v4.0)
8.8 (v3.1)
|
Uniong｜WebITR - Insecure Deserialization
|
Uniong
|
WebITR
|
2026-10-20T06:24:08.653Z |
2026-10-20T16:11:21.713Z |