|
cve-2026-110909
|
5 (v3.1)
|
Wheels CLI through 4.1.0 does not verify that the…
|
Wheels
|
Wheels CLI
|
2026-10-15T02:56:38.852Z |
2026-10-20T02:36:26.506Z |
|
cve-2026-109430
|
8.7 (v4.0)
7.5 (v3.1)
|
Ellucian WebAdvisor 3.2 Unauthenticated XXE Injection
|
Ellucian
|
WebAdvisor
|
2026-10-15T01:31:06.896Z |
2026-10-20T02:35:29.262Z |
|
cve-2026-106701
|
|
ELADMIN v2.7 and before is vulnerable to Cross Si…
|
n/a
|
n/a
|
2026-10-15T00:00:00.000Z |
2026-10-20T02:34:48.518Z |
|
cve-2026-104586
|
N/A
|
AUTOM8N (WHM/cPanel plugin) through commit 82821f…
|
n/a
|
n/a
|
2026-10-15T00:00:00.000Z |
2026-10-20T02:33:38.939Z |
|
cve-2026-88753
|
N/A
|
A Regular-Expression Denial of Service (ReDoS) in…
|
n/a
|
n/a
|
2026-10-15T00:00:00.000Z |
2026-10-20T02:32:28.883Z |
|
cve-2026-110871
|
7.1 (v4.0)
6.5 (v3.1)
|
Nodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header …
|
nodemailer
|
nodemailer
|
2026-10-14T22:52:59.681Z |
2026-10-20T02:28:10.449Z |
|
cve-2026-110866
|
5.3 (v4.0)
4.7 (v3.1)
|
Renovate before 44.61.3 minimumReleaseAge Bypass via P…
|
renovatebot
|
renovate
|
2026-10-14T22:52:53.970Z |
2026-10-20T02:27:10.660Z |
|
cve-2026-110861
|
6.3 (v4.0)
3.7 (v3.1)
|
Better Auth drizzle-adapter 1.6.17 before 1.7.7 Rate L…
|
better-auth
|
drizzle-adapter
|
2026-10-14T22:52:45.713Z |
2026-10-20T02:26:30.363Z |
|
cve-2026-110856
|
8.7 (v4.0)
7.5 (v3.1)
|
GitPython before 3.2.0 ReDoS via _re_actor_epoch in pa…
|
gitpython-developers
|
GitPython
|
2026-10-14T22:52:38.541Z |
2026-10-20T02:25:27.631Z |
|
cve-2026-110851
|
6.1 (v4.0)
|
n8n before 2.41.4 and 2.42.1 Cross-Project Agent Owner…
|
n8n-io
|
n8n
|
2026-10-14T22:52:27.451Z |
2026-10-20T02:24:35.205Z |
|
cve-2026-110846
|
7 (v4.0)
|
n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signat…
|
n8n-io
|
n8n
|
2026-10-14T22:52:21.869Z |
2026-10-20T02:22:42.103Z |
|
cve-2026-110841
|
6.1 (v4.0)
|
n8n before 2.41.4 and 2.42.0 Authorization Bypass in A…
|
n8n-io
|
n8n
|
2026-10-14T22:52:16.473Z |
2026-10-20T02:21:47.592Z |
|
cve-2026-110836
|
7.1 (v4.0)
6.5 (v3.1)
|
FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gate…
|
FreeRDP
|
FreeRDP
|
2026-10-14T22:52:11.374Z |
2026-10-20T02:17:21.565Z |
|
cve-2026-110831
|
5.3 (v4.0)
4.3 (v3.1)
|
FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive R…
|
FreeRDP
|
FreeRDP
|
2026-10-14T22:52:06.410Z |
2026-10-20T02:15:59.346Z |
|
cve-2026-110698
|
|
Praat Model Loader whisper.cpp whisper_model_load out-…
|
n/a
|
Praat
|
2026-10-14T21:45:09.762Z |
2026-10-20T02:15:11.452Z |
|
cve-2026-110689
|
|
OpenClaw ClawScan Static Scanner runner.go shouldSkipT…
|
OpenClaw
|
ClawScan
|
2026-10-14T20:45:21.381Z |
2026-10-20T02:14:18.062Z |
|
cve-2026-104108
|
|
FileRise OIDC login can bind an attacker identity to a…
|
error311
|
FileRise
|
2026-10-14T20:39:27.691Z |
2026-10-20T02:11:28.127Z |
|
cve-2026-103977
|
|
FileRise: Session-scoped TOTP rate limiting permits re…
|
error311
|
FileRise
|
2026-10-14T20:38:39.485Z |
2026-10-20T02:10:25.191Z |
|
cve-2026-77427
|
|
FileRise: Insecure default cryptographic key fallback …
|
error311
|
FileRise
|
2026-10-14T20:32:55.815Z |
2026-10-20T02:09:06.968Z |
|
cve-2026-57493
|
|
FileRise: Remember-me auto-login uses stale admin role…
|
error311
|
FileRise
|
2026-10-14T20:22:06.735Z |
2026-10-20T02:08:08.010Z |
|
cve-2026-57489
|
|
FileRise: AUTH_BYPASS reverse-proxy header trust witho…
|
error311
|
FileRise
|
2026-10-14T20:16:00.021Z |
2026-10-20T02:07:03.653Z |
|
cve-2026-55679
|
|
WeGIA: Pre-auth Installer Injection Chain Enables Comm…
|
LabRedesCefetRJ
|
WeGIA
|
2026-10-14T19:44:02.494Z |
2026-10-20T02:06:11.939Z |
|
cve-2026-102985
|
|
Plane: Any project member can modify (deactivate) othe…
|
makeplane
|
plane
|
2026-10-14T19:31:13.476Z |
2026-10-20T02:05:06.225Z |
|
cve-2026-110668
|
|
cemtan sar2html sar2html.py index sql injection
|
cemtan
|
sar2html
|
2026-10-14T19:30:14.467Z |
2026-10-20T02:04:08.159Z |
|
cve-2026-55385
|
|
InvoiceShelf: SSRF via unvalidated Gotenberg PDF rende…
|
InvoiceShelf
|
InvoiceShelf
|
2026-10-14T19:25:32.410Z |
2026-10-20T02:02:13.638Z |
|
cve-2026-54701
|
|
Markdown Preview Enhanced: Stored XSS via Unsanitized …
|
shd101wyy
|
vscode-markdown-preview-enhanced
|
2026-10-14T19:11:51.712Z |
2026-10-20T02:01:15.836Z |
|
cve-2026-82402
|
|
Gogs: Open Redirect in /redirect endpoint via backslas…
|
gogs
|
gogs
|
2026-10-14T18:49:19.768Z |
2026-10-20T01:58:51.683Z |
|
cve-2026-110773
|
5.3 (v4.0)
4.3 (v3.1)
|
GrowChief through 0.3.0 Missing Authorization via /use…
|
growchief
|
growchief
|
2026-10-14T18:48:01.395Z |
2026-10-20T01:57:25.985Z |
|
cve-2026-110768
|
6.3 (v4.0)
4.8 (v3.1)
|
holaOS through 2026.822.1 Authorization Bypass via Tel…
|
holaboss-ai
|
holaOS
|
2026-10-14T18:47:50.568Z |
2026-10-20T01:56:39.029Z |
|
cve-2026-110763
|
5.3 (v4.0)
4.3 (v3.1)
|
lamp-boot 4.16.0-java17 through 4.21.2-java17 IDOR via…
|
zuihou
|
lamp-boot
|
2026-10-14T18:47:39.046Z |
2026-10-20T01:55:41.647Z |