|
cve-2026-77696
|
|
Timing Side-Channel in SM2 Signature Generation
|
OpenSSL
|
OpenSSL
|
2026-09-29T15:32:22.520Z |
2026-09-29T16:51:33.618Z |
|
cve-2026-75806
|
|
Unauthenticated and Undersized DTLS 1.2 AEAD Record Ca…
|
OpenSSL
|
OpenSSL
|
2026-09-29T15:32:21.457Z |
2026-09-29T16:53:23.785Z |
|
cve-2026-75805
|
|
NULL Pointer Dereference in CMP Client Revocation Resp…
|
OpenSSL
|
OpenSSL
|
2026-09-29T15:32:20.408Z |
2026-09-29T16:54:39.263Z |
|
cve-2026-75804
|
|
QUIC Connection-Level Flow Control is Not Enforced for…
|
OpenSSL
|
OpenSSL
|
2026-09-29T15:32:19.335Z |
2026-09-29T17:15:40.043Z |
|
cve-2026-72897
|
|
Out-of-Bounds Access After SSL_set_SSL_CTX() During a …
|
OpenSSL
|
OpenSSL
|
2026-09-29T15:32:18.277Z |
2026-09-29T17:16:38.842Z |
|
cve-2026-97688
|
|
urllib3: Chunked Deflate streaming can enter an infini…
|
urllib3
|
urllib3
|
2026-09-29T15:32:17.622Z |
2026-09-29T15:42:34.502Z |
|
cve-2026-54875
|
|
Non-Constant-Time SM2 Scalar Multiplication on ARM64 a…
|
OpenSSL
|
OpenSSL
|
2026-09-29T15:32:17.206Z |
2026-09-29T17:17:20.483Z |
|
cve-2026-54873
|
|
QUIC STREAM Fragment Metadata DoS
|
OpenSSL
|
OpenSSL
|
2026-09-29T15:32:16.134Z |
2026-09-30T20:11:09.162Z |
|
cve-2026-54872
|
|
Timing Side-Channel in Scalar Multiplication for Non-N…
|
OpenSSL
|
OpenSSL
|
2026-09-29T15:32:15.075Z |
2026-09-29T17:28:12.657Z |
|
cve-2026-42772
|
|
Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC
|
OpenSSL
|
OpenSSL
|
2026-09-29T15:32:14.009Z |
2026-09-30T20:11:09.295Z |
|
cve-2026-35191
|
|
QUIC Unvalidated Amplification Credit may be Over Accounted
|
OpenSSL
|
OpenSSL
|
2026-09-29T15:32:12.944Z |
2026-09-30T20:11:09.437Z |
|
cve-2026-35189
|
|
Excessive Memory Allocation in Relative CRLDP Processing
|
OpenSSL
|
OpenSSL
|
2026-09-29T15:32:11.889Z |
2026-09-30T20:11:09.577Z |
|
cve-2026-97687
|
|
urllib3: HTTPS proxy TLS configuration may be ignored …
|
urllib3
|
urllib3
|
2026-09-29T15:30:27.136Z |
2026-09-30T20:11:09.721Z |
|
cve-2026-93332
|
N/A
|
Improper access control in the partial connection…
|
Devolutions
|
Server
|
2026-09-29T15:29:20.156Z |
2026-09-30T20:11:09.869Z |
|
cve-2026-102601
|
|
Flysystem: WhitespacePathNormalizer's control-characte…
|
thephpleague
|
flysystem
|
2026-09-29T15:26:42.044Z |
2026-09-29T16:02:04.360Z |
|
cve-2026-93330
|
N/A
|
Improper rule enforcement in the PAM Active Direc…
|
Devolutions
|
Server
|
2026-09-29T15:25:16.942Z |
2026-09-29T15:40:51.204Z |
|
cve-2026-102600
|
|
Socket.IO: Prototype Pollution via Unsafe Client Sessi…
|
socketio
|
socket.io
|
2026-09-29T15:23:15.857Z |
2026-09-29T16:28:28.476Z |
|
cve-2026-102598
|
|
Werkzeug safe_join() allows Windows special device names
|
pallets
|
werkzeug
|
2026-09-29T15:16:28.900Z |
2026-09-29T15:44:10.657Z |
|
cve-2023-54400
|
9.3 (v4.0)
9.8 (v3.1)
|
Fumeng Cloud SQL Injection via AjaxMethod.ashx getEmpByname
|
Fumasoft
|
Fumeng Cloud
|
2026-09-29T15:13:10.616Z |
2026-09-30T15:09:51.628Z |
|
cve-2026-100308
|
7.8 (v3.1)
8.4 (v4.0)
|
GluonTS arbitrary command execution during model deser…
|
AWS
|
gluonts
|
2026-09-29T15:05:53.802Z |
2026-09-30T15:28:19.374Z |
|
cve-2026-68911
|
|
Nicotine+: Decompression of peer messages can exhaust …
|
nicotine-plus
|
nicotine-plus
|
2026-09-29T14:59:09.588Z |
2026-09-29T16:05:09.695Z |
|
cve-2026-63209
|
|
Integer Overflow or Wraparound and Out-of-bounds Write…
|
klauspost
|
compress
|
2026-09-29T14:58:53.366Z |
2026-09-29T16:32:32.677Z |
|
cve-2015-20122
|
8.7 (v4.0)
7.5 (v3.1)
|
Seeyon A6 OA Unauthenticated SQL Injection via downloa…
|
Yonyou
|
A6 OA
|
2026-09-29T14:58:49.924Z |
2026-09-29T16:07:01.698Z |
|
cve-2026-86035
|
|
Weblate: Mercurial argument injection via repository f…
|
WeblateOrg
|
weblate
|
2026-09-29T14:58:20.313Z |
2026-10-02T12:09:21.053Z |
|
cve-2026-49243
|
|
Webmin: Reflected XSS in the Configuration module
|
webmin
|
webmin
|
2026-09-29T14:57:48.911Z |
2026-10-13T14:34:36.657Z |
|
cve-2026-102491
|
|
mahonelau kykms SqlInjectionUtil QueryGenerator.java Q…
|
mahonelau
|
kykms
|
2026-09-29T14:45:10.272Z |
2026-09-29T16:33:37.627Z |
|
cve-2026-22094
|
9.3 (v4.0)
|
Weak root password in EVbee DC 80
|
EVbee
|
DC 80
|
2026-09-29T14:31:33.304Z |
2026-10-19T09:10:58.451Z |
|
cve-2026-22101
|
5.1 (v4.0)
|
Sensitive information leak through hidden menu
|
EVbee
|
DC-80
|
2026-09-29T14:31:28.451Z |
2026-10-19T09:10:53.028Z |
|
cve-2026-102570
|
7 (v4.0)
5.5 (v3.1)
|
ClipBucket v5 through 5.5.3-#197 SQL Injection via lan…
|
MacWarrior
|
clipbucket-v5
|
2026-09-29T14:22:38.769Z |
2026-10-06T13:36:55.609Z |
|
cve-2026-102569
|
7 (v4.0)
5.5 (v3.1)
|
ClipBucket v5 through 5.5.3-#197 SQL Injection via vid…
|
MacWarrior
|
clipbucket-v5
|
2026-09-29T14:22:38.040Z |
2026-10-06T13:36:54.722Z |