|
cve-2026-86875
|
N/A
|
An input validation issue was addressed with impr…
|
Apple
|
Xcode
|
2026-10-20T00:50:44.830Z |
2026-10-20T14:54:14.751Z |
|
cve-2026-112392
|
|
Pillow: NULL dereference in ImagingExpand via rank fil…
|
python-pillow
|
Pillow
|
2026-10-19T21:17:18.908Z |
2026-10-20T14:50:31.632Z |
|
cve-2026-112894
|
|
Pillow: Quadratic-time DoS in PDF save_all (PdfParser.…
|
python-pillow
|
Pillow
|
2026-10-19T21:55:19.424Z |
2026-10-20T14:46:13.675Z |
|
cve-2026-112900
|
|
Pillow: Argument Injection in Ghostscript call, potent…
|
python-pillow
|
Pillow
|
2026-10-19T22:07:50.418Z |
2026-10-20T14:43:44.563Z |
|
cve-2026-112371
|
|
H3C Magic NX15 RPC esps write code injection
|
H3C
|
Magic NX15
|
2026-10-19T22:30:17.115Z |
2026-10-20T14:42:20.665Z |
|
cve-2025-36061
|
6.5 (v3.1)
|
TS4500 Tape Library Denial of Service
|
IBM
|
Storage TS4500 Library
|
2026-10-19T22:51:04.688Z |
2026-10-20T14:41:22.294Z |
|
cve-2026-8355
|
N/A
|
IBM ContextForge MCP Gateway is affected by server-sid…
|
IBM
|
ContextForge MCP Gateway
|
2026-10-19T23:42:01.778Z |
2026-10-20T14:37:15.968Z |
|
cve-2026-112774
|
8.7 (v4.0)
7.2 (v3.1)
|
Craft CMS 5.8.0 before 5.11.0 Admin RCE via ContentBlo…
|
craftcms
|
cms
|
2026-10-19T19:10:52.576Z |
2026-10-20T14:36:01.519Z |
|
cve-2026-109126
|
8.8 (v3.1)
|
IBM Verify Identity Access and IBM Security Verify Acc…
|
IBM
|
Verify Identity Access
|
2026-10-19T23:43:19.165Z |
2026-10-20T14:35:23.500Z |
|
cve-2026-109441
|
6.9 (v4.0)
5.8 (v3.1)
|
LangAlpha through 2026.09.07 Cross-Tenant Sandbox Expo…
|
ginlix-ai
|
LangAlpha
|
2026-10-20T00:46:06.033Z |
2026-10-20T14:34:42.144Z |
|
cve-2026-75128
|
9.3 (v4.0)
9.8 (v3.1)
|
Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE…
|
chatchat-space
|
Langchain-Chatchat
|
2026-10-20T00:46:08.977Z |
2026-10-20T14:34:07.343Z |
|
cve-2026-77926
|
8.7 (v4.0)
8.8 (v3.1)
|
Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent…
|
apconw
|
Aix-DB
|
2026-10-20T00:46:09.952Z |
2026-10-20T14:33:10.813Z |
|
cve-2026-113353
|
5.3 (v4.0)
5.4 (v3.1)
|
LearnPress before 4.4.10 Missing Authorization via Leg…
|
ThimPress
|
LearnPress
|
2026-10-20T10:41:38.826Z |
2026-10-20T14:32:51.446Z |
|
cve-2026-113358
|
8.7 (v4.0)
7.5 (v3.1)
|
LavaLite CMS through 10.1.2 Missing Authentication via…
|
lavalite
|
cms
|
2026-10-20T10:41:42.303Z |
2026-10-20T14:31:08.984Z |
|
cve-2026-86874
|
N/A
|
An out-of-bounds read was addressed with improved…
|
Apple
|
Xcode
|
2026-10-20T00:50:44.500Z |
2026-10-20T14:30:23.511Z |
|
cve-2026-109395
|
8.8 (v4.0)
9.1 (v3.1)
|
Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Ac…
|
ning
|
compress-lzf
|
2026-10-20T00:46:04.633Z |
2026-10-20T14:29:50.505Z |
|
cve-2026-77934
|
8.7 (v4.0)
8.8 (v3.1)
|
Coze Studio before 0.5.0 RCE via Unsandboxed Local Pyt…
|
coze-dev
|
coze-studio
|
2026-10-20T00:46:12.780Z |
2026-10-20T14:29:04.949Z |
|
cve-2026-85511
|
4.2 (v3.1)
|
Wildfly-elytron-realm-token: parameter injection in ea…
|
Red Hat
|
Red Hat JBoss Enterprise Application Platform 8.1.8.GA
|
2026-09-18T14:29:01.894Z |
2026-10-20T14:20:59.343Z |
|
cve-2026-112779
|
9.3 (v4.0)
9.8 (v3.1)
|
Grav API Plugin before 1.0.42 Cache Exhaustion and Pag…
|
getgrav
|
grav-plugin-api
|
2026-10-19T19:10:55.987Z |
2026-10-20T14:14:32.480Z |
|
cve-2026-111862
|
|
Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded M…
|
RankMath
|
Rank Math SEO PRO
|
2026-10-19T16:35:59.949Z |
2026-10-20T14:10:31.918Z |
|
cve-2026-97246
|
4.9 (v3.1)
|
WordPress ShortPixel Image Optimizer plugin <= 6.5.5 -…
|
ShortPixel
|
ShortPixel Image Optimizer
|
2026-09-30T12:28:04.695Z |
2026-10-20T13:59:39.610Z |
|
cve-2026-112896
|
|
Pillow: TIFF encoder ColorMap plane-size mismatch caus…
|
python-pillow
|
Pillow
|
2026-10-19T21:59:17.743Z |
2026-10-20T13:55:36.949Z |
|
cve-2026-70465
|
7.3 (v3.1)
|
A buffer copy without checking size of input ('cl…
|
Fortinet
|
FortiClientWindows
|
2026-08-12T11:52:25.666Z |
2026-10-20T13:54:58.117Z |
|
cve-2026-112891
|
|
Pillow: Quadratic GIF comment copying during save
|
python-pillow
|
Pillow
|
2026-10-19T21:33:32.180Z |
2026-10-20T13:54:10.370Z |
|
cve-2026-112361
|
|
Dolibarr CSP document.php protection mechanism
|
n/a
|
Dolibarr
|
2026-10-19T21:45:06.736Z |
2026-10-20T13:53:23.490Z |
|
cve-2026-19178
|
6.8 (v3.1)
|
TS4500 Tape Library Race Condition
|
IBM
|
Storage TS4500 Library
|
2026-10-19T22:50:34.565Z |
2026-10-20T13:52:27.830Z |
|
cve-2026-112373
|
|
H3C Magic NX15 usrlist sub_416874 stack-based overflow
|
H3C
|
Magic NX15
|
2026-10-19T23:00:16.156Z |
2026-10-20T13:51:59.801Z |
|
cve-2026-107400
|
8.8 (v3.1)
|
Security Vulnerability identified in IBM TRIRIGA - GWT…
|
IBM
|
TRIRIGA Application Platform
|
2026-10-19T23:46:46.720Z |
2026-10-20T13:51:15.010Z |
|
cve-2026-77932
|
9.3 (v4.0)
9.8 (v3.1)
|
DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/c…
|
eosphoros-ai
|
DB-GPT
|
2026-10-20T00:46:11.410Z |
2026-10-20T13:49:48.138Z |
|
cve-2026-77933
|
9.3 (v4.0)
9.8 (v3.1)
|
DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials …
|
eosphoros-ai
|
DB-GPT
|
2026-10-20T00:46:12.076Z |
2026-10-20T13:49:14.362Z |