|
cve-2026-14933
|
8.6 (v4.0)
|
Unblu Spark Cross-Site Scripting in Embedded Co-Browsing
|
Unblu inc.
|
Unblu Spark
|
2026-10-20T11:08:43.830Z |
2026-10-20T15:28:15.051Z |
|
cve-2026-92449
|
6.8 (v4.0)
|
Binary resource loader: unbounded map_id from a theme …
|
Eclipse Foundation
|
Eclipse ThreadX - GUIX
|
2026-10-20T14:51:24.582Z |
2026-10-20T15:27:55.848Z |
|
cve-2026-112906
|
|
filelock: SoftFileLock evicts a fresh lock file whose …
|
tox-dev
|
filelock
|
2026-10-20T14:09:51.934Z |
2026-10-20T15:27:25.903Z |
|
cve-2026-96903
|
N/A
|
Easy Property Listings < 3.5.27 - Subscriber+ Sensitiv…
|
Unknown
|
Easy Property Listings
|
2026-10-20T06:00:15.024Z |
2026-10-20T15:26:51.544Z |
|
cve-2026-96902
|
N/A
|
Easy Property Listings < 3.5.28 - Unauthenticated Hidd…
|
Unknown
|
Easy Property Listings
|
2026-10-20T06:00:14.826Z |
2026-10-20T15:26:51.388Z |
|
cve-2026-92446
|
6.8 (v4.0)
|
GUIX binary resource loader reads past the end of a re…
|
Eclipse Foundation
|
Eclipse ThreadX - GUIX
|
2026-10-20T14:52:45.765Z |
2026-10-20T15:26:36.082Z |
|
cve-2026-113397
|
|
DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_cert…
|
DrayTek
|
Vigor2960
|
2026-10-20T14:15:12.272Z |
2026-10-20T15:26:34.813Z |
|
cve-2026-112915
|
|
filelock ReadWriteLock: a crafted lock database makes …
|
tox-dev
|
filelock
|
2026-10-20T14:28:41.520Z |
2026-10-20T15:25:38.592Z |
|
cve-2026-91189
|
7.1 (v4.0)
|
GUIX binary resource loader: unvalidated glyph range c…
|
Eclipse Foundation
|
Eclipse ThreadX - GUIX
|
2026-10-20T14:53:44.860Z |
2026-10-20T15:25:24.066Z |
|
cve-2026-91059
|
6.8 (v4.0)
|
JPEG decoder: a duplicate SOF0 after SOS publishes a p…
|
Eclipse Foundation
|
Eclipse ThreadX - GUIX
|
2026-10-20T14:54:37.119Z |
2026-10-20T15:24:14.860Z |
|
cve-2026-112944
|
|
launch-editor: Editor CLI flag misinterpretation causi…
|
vitejs
|
launch-editor
|
2026-10-20T14:57:38.728Z |
2026-10-20T15:23:12.248Z |
|
cve-2026-92454
|
6.1 (v3.1)
6.8 (v4.0)
|
JPEG decoder: truncated segments are read past the ima…
|
Eclipse Foundation
|
Eclipse ThreadX - GUIX
|
2026-10-20T14:58:36.821Z |
2026-10-20T15:21:42.800Z |
|
cve-2026-64959
|
|
Apache Kylin: Missing authentication on certain cache …
|
Apache Software Foundation
|
Apache Kylin
|
2026-10-16T12:16:00.359Z |
2026-10-20T15:18:33.054Z |
|
cve-2026-109587
|
8.8 (v3.1)
9.3 (v4.0)
|
Incorrect authorization in the Arm Cortex-R82 MPU port…
|
FreeRTOS
|
FreeRTOS-Kernel
|
2026-10-16T17:08:07.685Z |
2026-10-20T15:16:10.707Z |
|
cve-2026-112939
|
|
filelock: SoftFileLock removes a live holder's marker …
|
tox-dev
|
filelock
|
2026-10-20T14:38:52.373Z |
2026-10-20T15:14:56.836Z |
|
cve-2026-112833
|
6.5 (v3.1)
|
WordPress Seriously Simple Podcasting plugin <= 3.17.0…
|
Castos
|
Seriously Simple Podcasting
|
2026-10-20T14:53:14.184Z |
2026-10-20T15:14:09.857Z |
|
cve-2026-112943
|
|
launch-editor: escapeCmdArgs() omits % escaping on Windows
|
vitejs
|
launch-editor
|
2026-10-20T14:53:41.777Z |
2026-10-20T15:13:40.862Z |
|
cve-2026-112014
|
6.8 (v4.0)
5.5 (v3.1)
|
LobsterAI before 2026.10.16 Hardcoded Password in Prov…
|
netease-youdao
|
LobsterAI
|
2026-10-18T11:38:35.397Z |
2026-10-20T15:12:51.711Z |
|
cve-2026-112771
|
7.1 (v4.0)
6.5 (v3.1)
|
Craft CMS before 4.18.8 and 5.11.0 Twig Sandbox Allowl…
|
craftcms
|
cms
|
2026-10-19T19:10:50.470Z |
2026-10-20T15:11:08.927Z |
|
cve-2026-111723
|
8.7 (v4.0)
8.8 (v3.1)
|
LingGuo-Drama through commit 8a6924a Broken Access Con…
|
LingGuoAI
|
LingGuo-Drama
|
2026-10-16T17:40:09.757Z |
2026-10-20T15:10:52.945Z |
|
cve-2026-112004
|
2.3 (v4.0)
3.1 (v3.1)
|
Teable before 2026-10-12T12-45-53Z.3331 Authorization …
|
teableio
|
teable
|
2026-10-18T11:38:28.495Z |
2026-10-20T15:09:09.557Z |
|
cve-2026-112776
|
9.3 (v4.0)
9.8 (v3.1)
|
Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypas…
|
craftcms
|
cms
|
2026-10-19T19:10:53.896Z |
2026-10-20T15:09:02.690Z |
|
cve-2026-112781
|
8.7 (v4.0)
6.5 (v3.1)
|
Grav 2.0.0 before 2.2.2 Information Disclosure via For…
|
getgrav
|
grav
|
2026-10-19T19:10:57.417Z |
2026-10-20T15:07:46.991Z |
|
cve-2026-111713
|
5.1 (v4.0)
5.4 (v3.1)
|
tarteaucitron.js before 1.37.0 XSS via getElemAttr Att…
|
AmauriC
|
tarteaucitron.js
|
2026-10-16T17:40:02.702Z |
2026-10-20T15:07:35.987Z |
|
cve-2026-71170
|
7.8 (v3.1)
|
Dell Application Store, versions prior to 26.05.0…
|
Dell
|
Application Store
|
2026-10-19T19:35:38.819Z |
2026-10-20T15:06:55.624Z |
|
cve-2026-112299
|
|
smrealms smr Album Website AlbumEditProcessor.php isUr…
|
smrealms
|
smr
|
2026-10-19T20:15:27.596Z |
2026-10-20T15:04:50.594Z |
|
cve-2026-111999
|
8.7 (v4.0)
7.5 (v3.1)
|
Vanus 0.8.0 through 0.9.0 Missing Authentication via G…
|
vanus-labs
|
vanus
|
2026-10-18T11:38:25.071Z |
2026-10-20T15:03:48.645Z |
|
cve-2026-112390
|
|
Pillow: Infinite loop in MIC n_frames when the embedded TIFF
|
python-pillow
|
Pillow
|
2026-10-19T20:35:39.189Z |
2026-10-20T15:02:38.367Z |
|
cve-2026-112400
|
|
Pillow: GIF seek keeps rejected size after Decompressi…
|
python-pillow
|
Pillow
|
2026-10-19T21:12:37.401Z |
2026-10-20T14:59:57.147Z |
|
cve-2026-112358
|
|
TiBillet Lespass APIv1 serializers.py get_img_from_url…
|
TiBillet
|
Lespass
|
2026-10-19T21:15:15.519Z |
2026-10-20T14:58:56.991Z |