|
cve-2026-11831
|
5.4 (v3.1)
|
IBM MQ Heap-based Buffer Overflow
|
IBM
|
MQ Operator
|
2026-10-19T16:41:02.438Z |
2026-10-20T16:11:18.172Z |
|
cve-2026-14511
|
6.5 (v3.1)
|
IBM MQ Denial of Service
|
IBM
|
MQ
|
2026-10-19T16:43:22.662Z |
2026-10-20T16:11:08.437Z |
|
cve-2026-111066
|
|
AIOHTTP: File descriptor exhaustion in multipart requests
|
aio-libs
|
aiohttp
|
2026-10-19T16:59:47.217Z |
2026-10-20T16:10:55.842Z |
|
cve-2026-112247
|
|
Wuxi Wubang Security Software Five-in-One Safety Produ…
|
Wuxi Wubang Security Software
|
Five-in-One Safety Production Management Information System
|
2026-10-19T17:15:15.630Z |
2026-10-20T16:10:48.654Z |
|
cve-2026-3303
|
3.7 (v3.1)
|
IBM Concert Software Permissive Cross-domain Security Policy
|
IBM
|
Concert
|
2026-10-19T17:17:45.343Z |
2026-10-20T16:10:39.862Z |
|
cve-2026-113402
|
7.1 (v4.0)
6.5 (v3.1)
|
ArmorX Global Technology｜ArmorX Spam - Local File Inclusion
|
ArmorX Global Technology
|
ArmorX Spam
|
2026-10-20T06:28:45.554Z |
2026-10-20T16:10:32.240Z |
|
cve-2026-111757
|
|
Hono: `serveStatic` decodes the request path a second …
|
honojs
|
hono
|
2026-10-19T17:31:20.341Z |
2026-10-20T16:10:30.638Z |
|
cve-2023-38375
|
6.1 (v3.1)
|
IBM Cloud Pak System Cross-Site Scripting
|
IBM
|
Cloud Pak System
|
2026-10-19T17:40:04.905Z |
2026-10-20T16:10:23.989Z |
|
cve-2026-112252
|
|
Wuxi Wubang Security Software Wubang Five-in-One Safet…
|
Wuxi Wubang Security Software
|
Wubang Five-in-One Safety Production Management Information System
|
2026-10-19T19:00:17.701Z |
2026-10-20T16:10:10.887Z |
|
cve-2026-112772
|
8.7 (v4.0)
8.8 (v3.1)
|
Craft CMS 5.0.0 before 5.11.0 RCE via Asset::getMimeTy…
|
craftcms
|
cms
|
2026-10-19T19:10:51.181Z |
2026-10-20T16:10:01.251Z |
|
cve-2026-112777
|
8.7 (v4.0)
7.2 (v3.1)
|
Craft CMS before 4.18.8 and 5.11.0 Twig create() Block…
|
craftcms
|
cms
|
2026-10-19T19:10:54.567Z |
2026-10-20T16:09:54.518Z |
|
cve-2026-112782
|
8.7 (v4.0)
7.5 (v3.1)
|
Grav before 1.7.53.5 and 2.2.2 Image Pixel Limit Bypas…
|
getgrav
|
grav
|
2026-10-19T19:10:58.093Z |
2026-10-20T16:09:47.734Z |
|
cve-2026-71169
|
7 (v3.1)
|
Dell Application Store, versions prior to 26.05.0…
|
Dell
|
Application Store
|
2026-10-19T19:41:05.089Z |
2026-10-20T16:09:41.284Z |
|
cve-2026-112300
|
|
DiffSK configobj __init__.py _sectionmarker redos
|
DiffSK
|
configobj
|
2026-10-19T20:30:18.020Z |
2026-10-20T16:09:34.927Z |
|
cve-2026-112391
|
|
Pillow: PdfParser can recurse without limit in get_val…
|
python-pillow
|
Pillow
|
2026-10-19T20:40:36.285Z |
2026-10-20T16:09:28.294Z |
|
cve-2026-112396
|
|
Pillow: Heap use-after-free when encoding TIFF to an i…
|
python-pillow
|
Pillow
|
2026-10-19T21:02:15.197Z |
2026-10-20T16:09:21.913Z |
|
cve-2026-112401
|
|
Pillow: Quadratic GIF comment concatenation allows DoS…
|
python-pillow
|
Pillow
|
2026-10-19T21:15:21.484Z |
2026-10-20T16:09:15.499Z |
|
cve-2026-112360
|
|
Netis EAP930 CGI Endpoint debug return200 backdoor
|
Netis
|
EAP930
|
2026-10-19T21:30:19.739Z |
2026-10-20T16:09:08.320Z |
|
cve-2026-112406
|
|
Pillow: Infinite loop in PdfParser.rewrite_pages on pa…
|
python-pillow
|
Pillow
|
2026-10-19T21:31:49.946Z |
2026-10-20T16:08:57.551Z |
|
cve-2026-112895
|
|
Pillow: Unbounded recursion parsing a PDF page tree or…
|
python-pillow
|
Pillow
|
2026-10-19T21:57:14.207Z |
2026-10-20T16:08:43.138Z |
|
cve-2026-112148
|
|
A vulnerability has been identified in LIFF SDK v…
|
LY Corporation
|
LIFF SDK
|
2026-10-20T06:31:15.606Z |
2026-10-20T16:08:35.384Z |
|
cve-2026-64610
|
|
Apache Kylin: Redis unsafe Java deserialization
|
Apache Software Foundation
|
Apache Kylin
|
2026-10-16T12:13:18.802Z |
2026-10-20T16:08:34.352Z |
|
cve-2026-112901
|
|
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls …
|
python-pillow
|
Pillow
|
2026-10-19T22:09:52.614Z |
2026-10-20T16:08:29.821Z |
|
cve-2026-112372
|
|
H3C Magic NX15 upload importprofile path traversal
|
H3C
|
Magic NX15
|
2026-10-19T22:45:19.358Z |
2026-10-20T16:08:20.868Z |
|
cve-2025-36069
|
5.5 (v3.1)
|
TS4500 Tape Library Insufficient Session Expiration
|
IBM
|
Storage TS4500 Library
|
2026-10-19T22:50:54.345Z |
2026-10-20T16:08:12.399Z |
|
cve-2026-109442
|
9.3 (v4.0)
9.8 (v3.1)
|
piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Cha…
|
cas-bigdatalab
|
piflow
|
2026-10-20T00:46:06.694Z |
2026-10-20T16:07:55.823Z |
|
cve-2026-110095
|
3.7 (v3.1)
|
fast-uri vulnerable to improper path equivalence in re…
|
fast-uri
|
fast-uri
|
2026-10-20T06:56:56.456Z |
2026-10-20T16:07:47.737Z |
|
cve-2026-77936
|
9.3 (v4.0)
9.8 (v3.1)
|
Letta through 0.16.8 Insecure Default Configuration Un…
|
letta-ai
|
letta
|
2026-10-20T00:46:14.144Z |
2026-10-20T16:07:28.161Z |
|
cve-2026-93300
|
|
EventON - Subscriber <= 1.4.5 - Unauthenticated SQL In…
|
EventOn
|
EventON - Subscriber
|
2026-10-20T05:39:17.375Z |
2026-10-20T16:07:19.927Z |
|
cve-2026-111844
|
6.5 (v3.1)
|
WordPress Brizy plugin 2.8.23 - Cross Site Scripting (…
|
Brizy
|
Brizy
|
2026-10-20T09:47:10.054Z |
2026-10-20T16:07:12.280Z |